Security update for java-1_8_0-openjdk (moderate)

An update that fixes 16 vulnerabilities is now available.

Description:

This update for java-1_8_0-openjdk fixes the following issues:

• Fix regression “8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)”,
  introduced in October 2020 CPU.

• Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU, bsc#1174157,
  and October 2020 CPU, bsc#1177943)

  • New features
    • JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    • PR3796: Allow the number of curves supported to be specified
  • Security fixes
    • JDK-8028431, CVE-2020-14579: NullPointerException in
      DerValue.equals(DerValue)
    • JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
      sun.security.util.DerInputStream.getUnalignedBitString()
    • JDK-8230613: Better ASCII conversions
    • JDK-8231800: Better listing of arrays
    • JDK-8232014: Expand DTD support
    • JDK-8233255: Better Swing Buttons
    • JDK-8233624: Enhance JNI linkage
    • JDK-8234032: Improve basic calendar services
    • JDK-8234042: Better factory production of certificates
    • JDK-8234418: Better parsing with CertificateFactory
    • JDK-8234836: Improve serialization handling
    • JDK-8236191: Enhance OID processing
    • JDK-8236196: Improve string pooling
    • JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    • JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    • JDK-8237592, CVE-2020-14577: Enhance certificate verification
    • JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    • JDK-8237995, CVE-2020-14782: Enhance certificate processing
    • JDK-8238002, CVE-2020-14581: Better matrix operations
    • JDK-8238804: Enhance key handling process
    • JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    • JDK-8238843: Enhanced font handing
    • JDK-8238920, CVE-2020-14583: Better Buffer support
    • JDK-8238925: Enhance WAV file playback
    • JDK-8240119, CVE-2020-14593: Less Affine Transformations
    • JDK-8240124: Better VM Interning
    • JDK-8240482: Improved WAV file playback
    • JDK-8241114, CVE-2020-14792: Better range handling
    • JDK-8241379: Update JCEKS support
    • JDK-8241522: Manifest improved jar headers redux
    • JDK-8242136, CVE-2020-14621: Better XML namespace handling
    • JDK-8242680, CVE-2020-14796: Improved URI Support
    • JDK-8242685, CVE-2020-14797: Better Path Validation
    • JDK-8242695, CVE-2020-14798: Enhanced buffer support
    • JDK-8243302: Advanced class supports
    • JDK-8244136, CVE-2020-14803: Improved Buffer supports
    • JDK-8244479: Further constrain certificates
    • JDK-8244955: Additional Fix for JDK-8240124
    • JDK-8245407: Enhance zoning of times
    • JDK-8245412: Better class definitions
    • JDK-8245417: Improve certificate chain handling
    • JDK-8248574: Improve jpeg processing
    • JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    • JDK-8253019: Enhanced JPEG decoding
  • Import of OpenJDK 8 u262 build 01
    • JDK-4949105: Access Bridge lacks html tags parsing
    • JDK-8003209: JFR events for network utilization
    • JDK-8030680: 292 cleanup from default method code assessment
    • JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java and
      some tests failed on windows intermittently
    • JDK-8041626: Shutdown tracing event
    • JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    • JDK-8149338: JVM Crash caused by Marlin renderer not handling NaN
      coordinates
    • JDK-8151582: (ch) test java/nio/channels/
      /AsyncCloseAndInterrupt.java failing due to “Connection succeeded”
    • JDK-8165675: Trace event for thread park has incorrect unit for
      timeout
    • JDK-8176182: 4 security tests are not run
    • JDK-8178910: Problemlist sample tests
    • JDK-8183925: Decouple crash protection from watcher thread
    • JDK-8191393: Random crashes during cfree+0x1c
    • JDK-8195817: JFR.stop should require name of recording
    • JDK-8195818: JFR.start should increase autogenerated name by
      one
    • JDK-8195819: Remove recording=x from jcmd JFR.check output
    • JDK-8199712: Flight Recorder
    • JDK-8202578: Revisit location for class unload events
    • JDK-8202835: jfr/event/os/TestSystemProcess.java fails on missing
      events
    • JDK-8203287: Zero fails to build after JDK-8199712 (Flight Recorder)
    • JDK-8203346: JFR: Inconsistent signature of jfr_add_string_constant
    • JDK-8203664: JFR start failure after AppCDS archive created with JFR
      StartFlightRecording
    • JDK-8203921: JFR thread sampling is missing fixes from JDK-8194552
    • JDK-8203929: Limit amount of data for JFR.dump
    • JDK-8205516: JFR tool
    • JDK-8207392: [PPC64] Implement JFR profiling
    • JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
      classloader which calls it
    • JDK-8209960: -Xlog:jfr* doesn’t work with the JFR
    • JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    • JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD 1.0.7
    • JDK-8211239: Build fails without JFR: empty JFR events signatures
      mismatch
    • JDK-8212232: Wrong metadata for the configuration of the cutoff for
      old object sample events
    • JDK-8213015: Inconsistent settings between JFR.configure and
      -XX:FlightRecorderOptions
    • JDK-8213421: Line number information for execution samples always 0
    • JDK-8213617: JFR should record the PID of the recorded process
    • JDK-8213734: SAXParser.parse(File, …) does not close resources when
      Exception occurs.
    • JDK-8213914: [TESTBUG] Several JFR VM events are not covered by tests
    • JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by test
    • JDK-8213966: The ZGC JFR events should be marked as experimental
    • JDK-8214542: JFR: Old Object Sample event slow on a deep heap in
      debug builds
    • JDK-8214750: Unnecessary <p> tags in jfr classes
    • JDK-8214896: JFR Tool left files behind
    • JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java fails with
      UnsatisfiedLinkError
    • JDK-8214925: JFR tool fails to execute
    • JDK-8215175: Inconsistencies in JFR event metadata
    • JDK-8215237: jdk.jfr.Recording javadoc does not compile
    • JDK-8215284: Reduce noise induced by periodic task getFileSize()
    • JDK-8215355: Object monitor deadlock with no threads holding the
      monitor (using jemalloc 5.1)
    • JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    • JDK-8215771: The jfr tool should pretty print reference chains
    • JDK-8216064: -XX:StartFlightRecording:settings= doesn’t work properly
    • JDK-8216486: Possibility of integer overflow in
      JfrThreadSampler::run()
    • JDK-8216528: test/jdk/java/rmi/transport/
      /runtimeThreadInheritanceLeak/ /RuntimeThreadInheritanceLeak.java
      failing with Xcomp
    • JDK-8216559: [JFR] Native libraries not correctly parsed from
      /proc/self/maps
    • JDK-8216578: Remove unused/obsolete method in JFR code
    • JDK-8216995: Clean up JFR command line processing
    • JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some systems
      due to process surviving SIGINT
    • JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
      TestShutdownEvent
    • JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    • JDK-8223147: JFR Backport
    • JDK-8223689: Add JFR Thread Sampling Support
    • JDK-8223690: Add JFR BiasedLock Event Support
    • JDK-8223691: Add JFR G1 Region Type Change Event Support
    • JDK-8223692: Add JFR G1 Heap Summary Event Support
    • JDK-8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    • JDK-8224475: JTextPane does not show images in HTML rendering
    • JDK-8226253: JAWS reports wrong number of radio buttons when buttons
      are hidden.
    • JDK-8226779: [TESTBUG] Test JFR API from Java agent
    • JDK-8226892: ActionListeners on JRadioButtons don’t get notified
      when selection is changed with arrow keys
    • JDK-8227011: Starting a JFR recording in response to JVMTI VMInit
      and / or Java agent premain corrupts memory
    • JDK-8227605: Kitchensink fails “assert((((klass)->trace_id() &
      (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0)) failed:
      invariant”
    • JDK-8229366: JFR backport allows unchecked writing to memory
    • JDK-8229401: Fix JFR code cache test failures
    • JDK-8229708: JFR backport code does not initialize
    • JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    • JDK-8230448: [test] JFRSecurityTestSuite.java is failing on Windows
    • JDK-8230707: JFR related tests are failing
    • JDK-8230782: Robot.createScreenCapture() fails if “awt.robot.gtk” is
      set to false
    • JDK-8230856: Java_java_net_NetworkInterface_getByName0 on unix
      misses ReleaseStringUTFChars in early return
    • JDK-8230947: TestLookForUntestedEvents.java is failing after
      JDK-8230707
    • JDK-8231995: two jtreg tests failed after 8229366 is fixed
    • JDK-8233623: Add classpath exception to copyright in
      EventHandlerProxyCreator.java file
    • JDK-8236002: CSR for JFR backport suggests not leaving out the
      package-info
    • JDK-8236008: Some backup files were accidentally left in the hotspot
      tree
    • JDK-8236074: Missed package-info
    • JDK-8236174: Should update javadoc since tags
    • JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    • JDK-8238452: Keytool generates wrong expiration date if validity is
      set to 2050/01/01
    • JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there
      are external FIPS modules in the NSSDB
    • JDK-8238589: Necessary code cleanup in JFR for JDK8u
    • JDK-8238590: Enable JFR by default during compilation in 8u
    • JDK-8239055: Wrong implementation of VMState.hasListener
    • JDK-8239476: JDK-8238589 broke windows build by moving OrderedPair
    • JDK-8239479: minimal1 and zero builds are failing
    • JDK-8239867: correct over use of INCLUDE_JFR macro
    • JDK-8240375: Disable JFR by default for July 2020 release
    • JDK-8241444: Metaspace::_class_vsm not initialized if compressed
      class pointers are disabled
    • JDK-8241902: AIX Build broken after integration of JDK-8223147 (JFR
      Backport)
    • JDK-8242788: Non-PCH build is broken after JDK-8191393
  • Import of OpenJDK 8 u262 build 02
    • JDK-8130737: AffineTransformOp can’t handle child raster with
      non-zero x-offset
    • JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation in
      java/awt/image/Raster/TestChildRasterOp.java
    • JDK-8230926: [macosx] Two apostrophes are entered instead of
      one with “U.S. International - PC” layout
    • JDK-8240576: JVM crashes after transformation in C2
      IdealLoopTree::merge_many_backedges
    • JDK-8242883: Incomplete backport of JDK-8078268: backport test part
  • Import of OpenJDK 8 u262 build 03
    • JDK-8037866: Replace the Fun class in tests with lambdas
    • JDK-8146612: C2: Precedence edges specification violated
    • JDK-8150986: serviceability/sa/jmap-hprof/
      /JMapHProfLargeHeapTest.java failing because expects HPROF JAVA
      PROFILE 1.0.1 file format
    • JDK-8229888: (zipfs) Updating an existing zip file does not preserve
      original permissions
    • JDK-8230597: Update GIFlib library to the 5.2.1
    • JDK-8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical call
      in early return
    • JDK-8233880, PR3798: Support compilers with multi-digit major
      version numbers
    • JDK-8239852: java/util/concurrent tests fail with
      -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
      verification should have failed
    • JDK-8241638: launcher time metrics always report 1 on Linux when
      _JAVA_LAUNCHER_DEBUG set
    • JDK-8243059: Build fails when --with-vendor-name contains a comma
    • JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    • JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    • JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion() returns
      wrong result
  • Import of OpenJDK 8 u262 build 04
    • JDK-8067796: (process) Process.waitFor(timeout, unit) doesn’t throw
      NPE if timeout is less than, or equal to zero when unit == null
    • JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    • JDK-8171934:
      ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification() does
      not recognize OpenJDK’s HotSpot VM
    • JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
      causes NPE
    • JDK-8243539: Copyright info (Year) should be updated for fix
      of 8241638
    • JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  • Import of OpenJDK 8 u262 build 05
    • JDK-7147060: com/sun/org/apache/xml/internal/security/
      /transforms/ClassLoaderTest.java doesn’t run in agentvm mode
    • JDK-8178374: Problematic ByteBuffer handling in
      CipherSpi.bufferCrypt method
    • JDK-8181841: A TSA server returns timestamp with precision higher
      than milliseconds
    • JDK-8227269: Slow class loading when running with JDWP
    • JDK-8229899: Make java.io.File.isInvalid() less racy
    • JDK-8236996: Incorrect Roboto font rendering on Windows with
      subpixel antialiasing
    • JDK-8241750: x86_32 build failure after JDK-8227269
    • JDK-8244407: JVM crashes after transformation in C2
      IdealLoopTree::split_fall_in
    • JDK-8244843: JapanEraNameCompatTest fails
  • Import of OpenJDK 8 u262 build 06
    • JDK-8246223: Windows build fails after JDK-8227269
  • Import of OpenJDK 8 u262 build 07
    • JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
      Jfr:on_vm_start() start-up order for correct option parsing
    • JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    • JDK-8245167: Top package in method profiling shows null in JMC
    • JDK-8246703: [TESTBUG] Add test for JDK-8233197
  • Import of OpenJDK 8 u262 build 08
    • JDK-8220293: Deadlock in JFR string pool
    • JDK-8225068: Remove DocuSign root certificate that is expiring in
      May 2020
    • JDK-8225069: Remove Comodo root certificate that is expiring in May
      2020
  • Import of OpenJDK 8 u262 build 09
    • JDK-8248399: Build installs jfr binary when JFR is disabled
  • Import of OpenJDK 8 u262 build 10
    • JDK-8248715: New JavaTimeSupplementary localisation for ‘in’
      installed in wrong package
  • Import of OpenJDK 8 u265 build 01
    • JDK-8249677: Regression in 8u after JDK-8237117: Better ForkJoinPool
      behavior
    • JDK-8250546: Expect changed behaviour reported in JDK-8249846
  • Import of OpenJDK 8 u272 build 01
    • JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
      test/compiler/7177917/Test7177917.java
    • JDK-8035493: JVMTI PopFrame capability must instruct compilers not
      to prune locals
    • JDK-8036088: Replace strtok() with its safe equivalent strtok_s() in
      DefaultProxySelector.c
    • JDK-8039082: [TEST_BUG] Test java/awt/dnd/
      /BadSerializationTest/BadSerializationTest.java fails
    • JDK-8075774: Small readability and performance improvements for zipfs
    • JDK-8132206: move ScanTest.java into OpenJDK
    • JDK-8132376: Add @requires os.family to the client tests with access
      to internal OS-specific API
    • JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    • JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
      /appletviewer/IOExceptionIfEncodedURLTest/
      /IOExceptionIfEncodedURLTest.sh
    • JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
      /MTGraphicsAccessTest.java hangs on Win. 8
    • JDK-8151788: NullPointerException from ntlm.Client.type3
    • JDK-8151834: Test SmallPrimeExponentP.java times out intermittently
    • JDK-8153430: jdk regression test MletParserLocaleTest,
      ParserInfiniteLoopTest reduce default timeout
    • JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary public
    • JDK-8156169: Some sound tests rarely hangs because of incorrect
      synchronization
    • JDK-8165936: Potential Heap buffer overflow when seaching timezone
      info files
    • JDK-8166148: Fix for JDK-8165936 broke solaris builds
    • JDK-8167300: Scheduling failures during gcm should be fatal
    • JDK-8167615: Opensource unit/regression tests for JavaSound
    • JDK-8172012: [TEST_BUG] delays needed in
      javax/swing/JTree/4633594/bug4633594.java
    • JDK-8177628: Opensource unit/regression tests for ImageIO
    • JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    • JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
      /AppletContextTest/BadPluginConfigurationTest.sh
    • JDK-8193137: Nashorn crashes when given an empty script file
    • JDK-8194298: Add support for per Socket configuration of TCP
      keepalive
    • JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java throws
      error
    • JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java fails
    • JDK-8210147: adjust some WSAGetLastError usages in windows network
      coding
    • JDK-8211714: Need to update vm_version.cpp to recognise VS2017 minor
      versions
    • JDK-8214862: assert(proj != __null) at compile.cpp:3251
    • JDK-8217606: LdapContext#reconnect always opens a new connection
    • JDK-8217647: JFR: recordings on 32-bit systems unreadable
    • JDK-8226697: Several tests which need the @key headful keyword are
      missing it.
    • JDK-8229378: jdwp library loader in linker_md.c quietly truncates on
      buffer overflow
    • JDK-8230303: JDB hangs when running monitor command
    • JDK-8230711: ConnectionGraph::unique_java_object(Node* N) return
      NULL if n is not in the CG
    • JDK-8234617: C1: Incorrect result of field load due to missing
      narrowing conversion
    • JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    • JDK-8235325: build failure on Linux after 8235243
    • JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    • JDK-8237951: CTW: C2 compilation fails with “malformed control flow”
    • JDK-8238225: Issues reported after replacing symlink at
      Contents/MacOS/libjli.dylib with binary
    • JDK-8239385: KerberosTicket client name refers wrongly to
      sAMAccountName in AD
    • JDK-8239819: XToolkit: Misread of screen information memory
    • JDK-8240295: hs_err elapsed time in seconds is not accurate enough
    • JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property
      with a security one
    • JDK-8242498: Invalid “sun.awt.TimedWindowEvent” object leads to JVM
      crash
    • JDK-8243489: Thread CPU Load event may contain wrong data for CPU
      time under certain conditions
    • JDK-8244818: Java2D Queue Flusher crash while moving application
      window to external monitor
    • JDK-8246310: Clean commented-out code about ModuleEntry and
      PackageEntry in JFR
    • JDK-8246384: Enable JFR by default on supported architectures for
      October 2020 release
    • JDK-8248643: Remove extra leading space in JDK-8240295 8u backport
    • JDK-8249610: Make
      sun.security.krb5.Config.getBooleanObject(String… keys) method
      public
  • Import of OpenJDK 8 u272 build 02
    • JDK-8023697: failed class resolution reports different class name in
      detail message for the first and subsequent times
    • JDK-8025886: replace [[ and == bash extensions in regtest
    • JDK-8046274: Removing dependency on jakarta-regexp
    • JDK-8048933: -XX:+TraceExceptions output should include the message
    • JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
      /fileaccess/FontFile.java fails
    • JDK-8148854: Class names “SomeClass” and “LSomeClass;” treated by
      JVM as an equivalent
    • JDK-8154313: Generated javadoc scattered all over the place
    • JDK-8163251: Hard coded loop limit prevents reading of smart card
      data greater than 8k
    • JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java fails
      with compiler.whitebox.SimpleTestCaseHelper(int) must be compiled
    • JDK-8183349: Better cleanup for jdk/test/javax/imageio/
      /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    • JDK-8191678: [TESTBUG] Add keyword headful in java/awt
      FocusTransitionTest test.
    • JDK-8201633: Problems with AES-GCM native acceleration
    • JDK-8211049: Second parameter of “initialize” method is not used
    • JDK-8219566: JFR did not collect call stacks when
      MaxJavaStackTraceDepth is set to zero
    • JDK-8220165: Encryption using GCM results in RuntimeException- input
      length out of bound
    • JDK-8220555: JFR tool shows potentially misleading message when it
      cannot access a file
    • JDK-8224217: RecordingInfo should use textual representation
      of path
    • JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
    • JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
      “multiple definition” link errors with GCC10
    • JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/ /SctpNet.c
      “multiple definition” link errors with GCC10
    • JDK-8238388, PR3798: libj2gss/NativeFunc.o “multiple definition”
      link errors with GCC10
    • JDK-8242556: Cannot load RSASSA-PSS public key with non-null params
      from byte array
    • JDK-8250755: Better cleanup for jdk/test/javax/imageio/
      /plugins/shared/CanWriteSequence.java
  • Import of OpenJDK 8 u272 build 03
    • JDK-6574989: TEST_BUG: javax/sound/sampled/Clip/bug5070081.java
      fails sometimes
    • JDK-8148754: C2 loop unrolling fails due to unexpected graph shape
    • JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests fail with
      error : revokeall.exe: Permission denied
    • JDK-8203357: Container Metrics
    • JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
    • JDK-8216283: Allow shorter method sampling interval than 10 ms
    • JDK-8221569: JFR tool produces incorrect output when both
      –categories and --events are specified
    • JDK-8233097: Fontmetrics for large Fonts has zero width
    • JDK-8248851: CMS: Missing memory fences between free chunk check and
      klass read
    • JDK-8250875: Incorrect parameter type for update_number in
      JDK_Version::jdk_update
  • Import of OpenJDK 8 u272 build 04
    • JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
      IllegalArgumentException for flags of type double
    • JDK-8177334: Update xmldsig implementation to Apache Santuario 2.1.1
    • JDK-8217878: ENVELOPING XML signature no longer works in JDK 11
    • JDK-8218629: XML Digital Signature throws NAMESPACE_ERR exception on
      OpenJDK 11, works 8/9/10
    • JDK-8243138: Enhance BaseLdapServer to support starttls extended
      request
  • Import of OpenJDK 8 u272 build 05
    • JDK-8026236: Add PrimeTest for BigInteger
    • JDK-8057003: Large reference arrays cause extremely long
      synchronization times
    • JDK-8060721: Test runtime/SharedArchiveFile/ /LimitSharedSizes.java
      fails in jdk 9 fcs new platforms/compiler
    • JDK-8152077: (cal) Calendar.roll does not always roll the hours
      during daylight savings
    • JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    • JDK-8211163: UNIX version of Java_java_io_Console_echo does not
      return a clean boolean
    • JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in docker
      container only works with debug JVMs
    • JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    • JDK-8236645: JDK 8u231 introduces a regression with incompatible
      handling of XML messages
    • JDK-8240676: Meet not symmetric failure when running lucene
      on jdk8
    • JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
    • JDK-8249158: THREAD_START and THREAD_END event posted in primordial
      phase
    • JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling
      Java container metrics
    • JDK-8251546: 8u backport of JDK-8194298 breaks AIX and Solaris builds
    • JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
      AgeTableTracer::is_tenuring_distribution_event_enabled
  • Import of OpenJDK 8 u272 build 06
    • JDK-8064319: Need to enable -XX:+TraceExceptions in release builds
    • JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11 v2.40
      support
    • JDK-8160768: Add capability to custom resolve host/domain names
      within the default JNDI LDAP provider
    • JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions() not
      working
    • JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface license
    • JDK-8184762: ZapStackSegments should use optimized memset
    • JDK-8193234: When using -Xcheck:jni an internally allocated buffer
      can leak
    • JDK-8219919: RuntimeStub name lost with PrintFrameConverterAssembly
    • JDK-8220313: [TESTBUG] Update base image for Docker testing to OL 7.6
    • JDK-8222079: Don’t use memset to initialize fields decode_env
      constructor in disassembler.cpp
    • JDK-8225695: 32-bit build failures after JDK-8080462 (Update
      SunPKCS11 provider with PKCS11 v2.40 support)
    • JDK-8226575: OperatingSystemMXBean should be made container aware
    • JDK-8226809: Circular reference in printed stack trace is not
      correctly indented & ambiguous
    • JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    • JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
    • JDK-8238898, PR3801: Missing hash characters for header on license
      file
    • JDK-8243320: Add SSL root certificates to Oracle Root CA program
    • JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release
      1.8.26
    • JDK-8245467: Remove 8u TLSv1.2 implementation files
    • JDK-8245469: Remove DTLS protocol implementation
    • JDK-8245470: Fix JDK8 compatibility issues
    • JDK-8245471: Revert JDK-8148188
    • JDK-8245472: Backport JDK-8038893 to JDK8
    • JDK-8245473: OCSP stapling support
    • JDK-8245474: Add TLS_KRB5 cipher suites support according to RFC-2712
    • JDK-8245476: Disable TLSv1.3 protocol in the ClientHello message by
      default
    • JDK-8245477: Adjust TLS tests location
    • JDK-8245653: Remove 8u TLS tests
    • JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    • JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
    • JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is set to
      either true or false
    • JDK-8251341: Minimal Java specification change
    • JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  • Import of OpenJDK 8 u272 build 07
    • JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  • Import of OpenJDK 8 u272 build 08
    • JDK-8062947: Fix exception message to correctly represent LDAP
      connection failure
    • JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to
      timeout on DeadServerNoTimeoutTest is incorrect
    • JDK-8252573: 8u: Windows build failed after 8222079 backport
  • Import of OpenJDK 8 u272 build 09
    • JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java : Compilation
      failed
  • Import of OpenJDK 8 u272 build 10
    • JDK-8254673: Call to JvmtiExport::post_vm_start() was removed by the
      fix for JDK-8249158
    • JDK-8254937: Revert JDK-8148854 for 8u272
  • Backports
    • JDK-8038723, PR3806: Openup some PrinterJob tests
    • JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when JTable
      contains certain string
    • JDK-8058779, PR3805: Faster implementation of
      String.replace(CharSequence, CharSequence)
    • JDK-8130125, PR3806: [TEST_BUG] add @modules to the several client
      tests unaffected by the automated bulk update
    • JDK-8144015, PR3806: [PIT] failures of text layout font tests
    • JDK-8144023, PR3806: [PIT] failure of text measurements in
      javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    • JDK-8144240, PR3806: [macosx][PIT] AIOOB in
      closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    • JDK-8145542, PR3806: The case failed automatically and thrown
      java.lang.ArrayIndexOutOfBoundsException exception
    • JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
      displaying Devanagari text in JEditorPane
    • JDK-8152358, PR3800: code and comment cleanups found during the hunt
      for 8077392
    • JDK-8152545, PR3804: Use preprocessor instead of compiling a program
      to generate native nio constants
    • JDK-8152680, PR3806: Regression in GlyphVector.getGlyphCharIndex
      behaviour
    • JDK-8158924, PR3806: Incorrect i18n text document layout
    • JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
      javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    • JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
      /GetGlyphCharIndexTest.java does not compile
    • JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
      /GlyphPainter2/6427244/bug6427244.java - compilation failed
    • JDK-8191512, PR3806: T2K font rasterizer code removal
    • JDK-8191522, PR3806: Remove Bigelow&Holmes Lucida fonts from JDK
      sources
    • JDK-8236512, PR3801: PKCS11 Connection closed after Cipher.doFinal
      and NoPadding
    • JDK-8254177, PR3809: (tz) Upgrade time-zone data to tzdata2020b
  • Bug fixes
    • PR3798: Fix format-overflow error on GCC 10, caused by passing NULL
      to a ‘%s’ directive
    • PR3795: ECDSAUtils for XML digital signatures should support the
      same curve set as the rest of the JDK
    • PR3799: Adapt elliptic curve patches to JDK-8245468: Add TLSv1.3
      implementation classes from 11.0.7
    • PR3808: IcedTea does not install the JFR *.jfc files
    • PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has fixed
      its use with Shenandoah
    • PR3811: Don’t attempt to install JFR files when JFR is disabled
  • Shenandoah
    • [backport] 8221435: Shenandoah should not mark through weak roots
    • [backport] 8221629: Shenandoah: Cleanup class unloading logic
    • [backport] 8222992: Shenandoah: Pre-evacuate all roots
    • [backport] 8223215: Shenandoah: Support verifying subset of roots
    • [backport] 8223774: Shenandoah: Refactor ShenandoahRootProcessor and
      family
    • [backport] 8224210: Shenandoah: Refactor ShenandoahRootScanner to
      support scanning CSet codecache roots
    • [backport] 8224508: Shenandoah: Need to update thread roots in final
      mark for piggyback ref update cycle
    • [backport] 8224579: ResourceMark not declared in
      shenandoahRootProcessor.inline.hpp with
      –disable-precompiled-headers
    • [backport] 8224679: Shenandoah: Make
      ShenandoahParallelCodeCacheIterator noncopyable
    • [backport] 8224751: Shenandoah: Shenandoah Verifier should select
      proper roots according to current GC cycle
    • [backport] 8225014: Separate ShenandoahRootScanner method for
      object_iterate
    • [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn’t work
      for Shenandoah
    • [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to ensure
      roots to-space invariant
    • [backport] 8225590: Shenandoah: Refactor
      ShenandoahClassLoaderDataRoots API
    • [backport] 8226413: Shenandoah: Separate root scanner for
      SH::object_iterate()
    • [backport] 8230853: Shenandoah: replace leftover assert(is_in(…))
      with rich asserts
    • [backport] 8231198: Shenandoah: heap walking should visit all roots
      most of the time
    • [backport] 8231244: Shenandoah: all-roots heap walking misses some
      weak roots
    • [backport] 8237632: Shenandoah: accept NULL fwdptr to cooperate with
      JVMTI and JFR
    • [backport] 8239786: Shenandoah: print per-cycle statistics
    • [backport] 8239926: Shenandoah: Shenandoah needs to mark nmethod’s
      metadata
    • [backport] 8240671: Shenandoah: refactor ShenandoahPhaseTimings
    • [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    • [backport] 8240750: Shenandoah: remove leftover files and mentions
      of ShenandoahAllocTracker
    • [backport] 8240868: Shenandoah: remove CM-with-UR piggybacking cycles
    • [backport] 8240872: Shenandoah: Avoid updating new regions from
      start of evacuation
    • [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    • [backport] 8240915: Shenandoah: Remove unused fields in init mark
      tasks
    • [backport] 8240948: Shenandoah: cleanup not-forwarded-objects paths
      after JDK-8240868
    • [backport] 8241007: Shenandoah: remove
      ShenandoahCriticalControlThreadPriority support
    • [backport] 8241062: Shenandoah: rich asserts trigger “empty
      statement” inspection
    • [backport] 8241081: Shenandoah: Do not modify update-watermark
      concurrently
    • [backport] 8241093: Shenandoah: editorial changes in flag
      descriptions
    • [backport] 8241139: Shenandoah: distribute mark-compact work exactly
      to minimize fragmentation
    • [backport] 8241142: Shenandoah: should not use parallel reference
      processing with single GC thread
    • [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    • [backport] 8241435: Shenandoah: avoid disabling pacing with
      “aggressive”
    • [backport] 8241520: Shenandoah: simplify region sequence numbers
      handling
    • [backport] 8241534: Shenandoah: region status should include update
      watermark
    • [backport] 8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    • [backport] 8241583: Shenandoah: turn heap lock asserts into macros
    • [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not derive
      from ContiguousSpace
    • [backport] 8241673: Shenandoah: refactor anti-false-sharing padding
    • [backport] 8241675: Shenandoah: assert(n->outcnt() > 0) at
      shenandoahSupport.cpp:2858 with
      java/util/Collections/FindSubList.java
    • [backport] 8241692: Shenandoah: remove
      ShenandoahHeapRegion::_reserved
    • [backport] 8241700: Shenandoah: Fold ShenandoahKeepAliveBarrier flag
      into ShenandoahSATBBarrier
    • [backport] 8241740: Shenandoah: remove ShenandoahHeapRegion::_heap
    • [backport] 8241743: Shenandoah: refactor and inline
      ShenandoahHeap::heap()
    • [backport] 8241748: Shenandoah: inline MarkingContext TAMS methods
    • [backport] 8241838: Shenandoah: no need to trash cset during final
      mark
    • [backport] 8241841: Shenandoah: ditch one of allocation type
      counters in ShenandoahHeapRegion
    • [backport] 8241842: Shenandoah: inline
      ShenandoahHeapRegion::region_number
    • [backport] 8241844: Shenandoah: rename
      ShenandoahHeapRegion::region_number
    • [backport] 8241845: Shenandoah: align ShenandoahHeapRegions to cache
      lines
    • [backport] 8241926: Shenandoah: only print heap changes for
      operations that directly affect it
    • [backport] 8241983: Shenandoah: simplify FreeSet logging
    • [backport] 8241985: Shenandoah: simplify collectable garbage logging
    • [backport] 8242040: Shenandoah: print allocation failure type
    • [backport] 8242041: Shenandoah: adaptive heuristics should account
      evac reserve in free target
    • [backport] 8242042: Shenandoah: tune down ShenandoahGarbageThreshold
    • [backport] 8242054: Shenandoah: New incremental-update mode
    • [backport] 8242075: Shenandoah: rename ShenandoahHeapRegionSize flag
    • [backport] 8242082: Shenandoah: Purge Traversal mode
    • [backport] 8242083: Shenandoah: split “Prepare Evacuation” tracking
      into cset/freeset counters
    • [backport] 8242089: Shenandoah: per-worker stats should be summed
      up, not averaged
    • [backport] 8242101: Shenandoah: coalesce and parallelise heap region
      walks during the pauses
    • [backport] 8242114: Shenandoah: remove
      ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    • [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
      dispatching
    • [backport] 8242211: Shenandoah: remove
      ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    • [backport] 8242212: Shenandoah: initialize
      ShenandoahHeuristics::_region_data eagerly
    • [backport] 8242213: Shenandoah: remove
      ShenandoahHeuristics::_bytes_in_cset
    • [backport] 8242217: Shenandoah: Enable GC mode to be
      diagnostic/experimental and have a name
    • [backport] 8242227: Shenandoah: transit regions to cset state when
      adding to collection set
    • [backport] 8242228: Shenandoah: remove unused
      ShenandoahCollectionSet methods
    • [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
      liveness-related methods
    • [backport] 8242267: Shenandoah: regions space needs to be aligned by
      os::vm_allocation_granularity()
    • [backport] 8242271: Shenandoah: add test to verify GC mode unlock
    • [backport] 8242273: Shenandoah: accept either SATB or IU barriers,
      but not both
    • [backport] 8242301: Shenandoah: Inline LRB runtime call
    • [backport] 8242316: Shenandoah: Turn NULL-check into assert in SATB
      slow-path entry
    • [backport] 8242353: Shenandoah: micro-optimize region liveness
      handling
    • [backport] 8242365: Shenandoah: use uint16_t instead of jushort for
      liveness cache
    • [backport] 8242375: Shenandoah: Remove
      ShenandoahHeuristic::record_gc_start/end methods
    • [backport] 8242641: Shenandoah: clear live data and update TAMS
      optimistically
    • [backport] 8243238: Shenandoah: explicit GC request should wait for
      a complete GC cycle
    • [backport] 8243301: Shenandoah: ditch ShenandoahAllowMixedAllocs
    • [backport] 8243307: Shenandoah: remove ShCollectionSet::live_data
    • [backport] 8243395: Shenandoah: demote guarantee in
      ShenandoahPhaseTimings::record_workers_end
    • [backport] 8243463: Shenandoah: ditch total_pause counters
    • [backport] 8243464: Shenandoah: print statistic counters in time
      order
    • [backport] 8243465: Shenandoah: ditch unused pause_other, conc_other
      counters
    • [backport] 8243487: Shenandoah: make _num_phases illegal phase type
    • [backport] 8243494: Shenandoah: set counters once per cycle
    • [backport] 8243573: Shenandoah: rename GCParPhases and related code
    • [backport] 8243848: Shenandoah: Windows build fails after JDK-8239786
    • [backport] 8244180: Shenandoah: carry Phase to
      ShWorkerTimingsTracker explicitly
    • [backport] 8244200: Shenandoah: build breakages after JDK-8241743
    • [backport] 8244226: Shenandoah: per-cycle statistics contain worker
      data from previous cycles
    • [backport] 8244326: Shenandoah: global statistics should not accept
      bogus samples
    • [backport] 8244509: Shenandoah: refactor
      ShenandoahBarrierC2Support::test_* methods
    • [backport] 8244551: Shenandoah: Fix racy update of update_watermark
    • [backport] 8244667: Shenandoah: SBC2Support::test_gc_state takes
      loop for wrong control
    • [backport] 8244730: Shenandoah: gc/shenandoah/options/
      /TestHeuristicsUnlock.java should only verify the heuristics
    • [backport] 8244732: Shenandoah: move heuristics code to
      gc/shenandoah/heuristics
    • [backport] 8244737: Shenandoah: move mode code to gc/shenandoah/mode
    • [backport] 8244739: Shenandoah: break superclass dependency
      on ShenandoahNormalMode
    • [backport] 8244740: Shenandoah: rename ShenandoahNormalMode to
      ShenandoahSATBMode
    • [backport] 8245461: Shenandoah: refine mode name()-s
    • [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
      constructor arguments
    • [backport] 8245464: Shenandoah: allocate collection set bitmap at
      lower addresses
    • [backport] 8245465: Shenandoah: test_in_cset can use more efficient
      encoding
    • [backport] 8245726: Shenandoah: lift/cleanup ShenandoahHeuristics
      names and properties
    • [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    • [backport] 8245757: Shenandoah: AlwaysPreTouch should not disable
      heap resizing or uncommits
    • [backport] 8245773: Shenandoah: Windows assertion failure after
      JDK-8245464
    • [backport] 8245812: Shenandoah: compute root phase parallelism
    • [backport] 8245814: Shenandoah: reconsider format specifiers for
      stats
    • [backport] 8245825: Shenandoah: Remove diagnostic flag
      ShenandoahConcurrentScanCodeRoots
    • [backport] 8246162: Shenandoah: full GC does not mark code roots
      when class unloading is off
    • [backport] 8247310: Shenandoah: pacer should not affect interrupt
      status
    • [backport] 8247358: Shenandoah: reconsider free budget slice for
      marking
    • [backport] 8247367: Shenandoah: pacer should wait on lock instead of
      exponential backoff
    • [backport] 8247474: Shenandoah: Windows build warning after
      JDK-8247310
    • [backport] 8247560: Shenandoah: heap iteration holds root locks all
      the time
    • [backport] 8247593: Shenandoah: should not block pacing reporters
    • [backport] 8247751: Shenandoah: options tests should run with
      smaller heaps
    • [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    • [backport] 8247757: Shenandoah: split heavy tests by heuristics to
      improve parallelism
    • [backport] 8247860: Shenandoah: add update watermark line in rich
      assert failure message
    • [backport] 8248041: Shenandoah: pre-Full GC root updates may miss
      some roots
    • [backport] 8248652: Shenandoah: SATB buffer handling may assume no
      forwarded objects
    • [backport] 8249560: Shenandoah: Fix racy GC request handling
    • [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    • [backport] 8249801: Shenandoah: Clear soft-refs on requested GC cycle
    • [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests should
      account for corner cases
    • Fix slowdebug build after JDK-8230853 backport
    • JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and
      JFR
    • JDK-8252366: Shenandoah: revert/cleanup changes in graphKit.cpp
    • Shenandoah: add JFR roots to root processor after JFR integration
    • Shenandoah: add root statistics for string dedup table/queues
    • Shenandoah: enable low-frequency STW class unloading
    • Shenandoah: fix build failures after JDK-8244737 backport
    • Shenandoah: Fix build failure with +JFR -PCH
    • Shenandoah: fix forceful pacer claim
    • Shenandoah: fix formats in ShenandoahStringSymbolTableUnlinkTask
    • Shenandoah: fix runtime linking failure due to non-compiled
      shenandoahBarrierSetC1
    • Shenandoah: hook statistics printing to PrintGCDetails, not PrintGC
    • Shenandoah: JNI weak roots are always cleared before Full GC mark
    • Shenandoah: missing SystemDictionary roots in
      ShenandoahHeapIterationRootScanner
    • Shenandoah: move barrier sets to their proper locations
    • Shenandoah: move parallelCleaning.* to shenandoah/
    • Shenandoah: pacer should use proper Atomics for intptr_t
    • Shenandoah: properly deallocates class loader metadata
    • Shenandoah: specialize String Table scans for better pause
      performance
    • Shenandoah: Zero build fails after recent Atomic cleanup in Pacer
  • AArch64 port
    • JDK-8161072, PR3797: AArch64: jtreg
      compiler/uncommontrap/TestDeoptOOM failure
    • JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java generates
      guarantee failure in C1
    • JDK-8183925, PR3797: [AArch64] Decouple crash protection from
      watcher thread
    • JDK-8199712, PR3797: [AArch64] Flight Recorder
    • JDK-8203481, PR3797: Incorrect constraint for unextended_sp in
      frame:safe_for_sender
    • JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall fails
      with SIGILL on aarch64
    • JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    • JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java fails
      on AArch64
    • JDK-8216989, PR3797:
      CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
      does not check for zero length on AARCH64
    • JDK-8217368, PR3797: AArch64: C2 recursive stack locking
      optimisation not triggered
    • JDK-8221658, PR3797: aarch64: add necessary predicate for ubfx
      patterns
    • JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a BufferBlob
    • JDK-8246482, PR3797: Build failures with +JFR -PCH
    • JDK-8247979, PR3797: aarch64: missing side effect of killing flags
      for clearArray_reg_reg
    • JDK-8248219, PR3797: aarch64: missing memory barrier in
      fast_storefield and fast_accessfield

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-2048=1