Path to this page:
Subject: CVS commit: pkgsrc/lang
From: Ryo ONODERA
Date: 2014-11-15 22:01:26
Message id: 20141115210126.D9CD298@cvs.netbsd.org
Log Message:
Update to 7.0.72
Changelog:
7.0.72: http://www.oracle.com/technetwork/java/javase/7u72-relnotes-2296190.html
Instructions to disable SSL v3.0 in Oracle JDK and JRE
Oracle recommends that users and developers disable use of the SSLv3 protocol. \
Please follow the Instructions to disable SSL v3.0 in Oracle JDK and JRE.
Change in javax.smartcardio.Card.disconnect(boolean reset) method behavior
Prior to the JDK 8u20 and JDK 7u72 releases, the \
javax.smartcardio.Card.disconnect(boolean reset) method had inverted logic for \
the 'reset' boolean value passed to it. The card was reset upon a disconnect if \
false was passed to it and vice versa. Starting with JDK 7u72 and JDK 8u20, the \
correct behavior as per API documentation has been implemented.
In order to provide backwards compatibility to users who rely on the old \
behavior, a new system property has been introduced. The following command-line \
option can be used to enforce the old broken behavior:
-Dsun.security.smartcardio.invertCardReset=true
This property is set by default for 7u72 and later JDK 7 update releases. By \
default, no behavioral change will be noticed in this area for JDK 7 update \
releases.
Also the following command-line option can be used to enforce the new correct \
behavior:
-Dsun.security.smartcardio.invertCardReset=false
This is default for 8u20 and later JDK 8 update releases. In future Java \
releases, the property will be ignored/disabled and default disconnect method \
behavior will be as specified by API.
Bug Fixes
This release contains fixes for security vulnerabilities. For more information, \
see Oracle Java SE Critical Patch Update Advisory.
For a list of bug fixes included in this release, see JDK 7u72 Bug Fixes page.
Area: security-libs/javax.net.ssl
Synopsis: Decrease the preference mode of RC4 in the enabled cipher suite list
This fix decreases the preference of RC4 based cipher suites in the default \
enabled cipher suite list of SunJSSE provider.
See JDK-8043832 (not public).
From: http://www.oracle.com/technetwork/java/javase/2col/7u72-bugfixes-2298229.html
Bug Id Category Subcategory Description
8036022 client-libs 2d D3D: rendering with XOR composite causes InternalError.
8019623 client-libs java.awt Lack of synchronization in AppContext.getAppContext()
8024061 client-libs java.awt Exception thrown when drag and drop between two \
components is executed quickly
8028617 client-libs java.awt Dvorak keyboard mapping not honored when ctrl \
key pressed
8016545 client-libs java.beans java.beans.XMLEncoder.writeObject output is wrong
8036819 client-libs javax.accessibility JAB: mneumonics not read for textboxes
8036983 client-libs javax.accessibility JAB:Multiselection Ctrl+CursorUp/Down \
and ActivateDescenderPropertyChanged event
8028616 client-libs javax.swing Htmleditorkit parser doesn't handle leading \
slash (/)
8032872 client-libs javax.swing [macosx] Cannot select from JComboBox in a JWindow
8032874 client-libs javax.swing ArrayIndexOutOfBoundsException in JTable \
while clearing data in JTable
8032878 client-libs javax.swing Editable combos in table do not behave as expected
8041451 core-libs javax.naming com.sun.jndi.ldap.Connection:ReadTimeout \
should abandon ldap request
8042857 core-libs javax.naming 14 stuck threads waiting for notification on \
LDAPRequest
7142035 core-svc java.lang.instrument assert in j.l.instrument agents during \
shutdown when daemon thread is running
8028623 core-svc tools SA: hash codes in SymbolTable mismatching \
java_lang_String::hash_code for extended characters.
8028619 deploy deployment_toolkit Display issue of java control panel in ko \
and ja locale
8031490 deploy deployment_toolkit Broken Java SE 7 jnlp samples (app2 and app3)
8038463 deploy deployment_toolkit Java Control Panel doesn't display \
correctly in high resolution
8025051 globalization locale-data Update resource files for TimeZone display names
8039298 hotspot compiler C2: assert(base == NULL || t_adr->isa_rawptr() || \
!phase->type(base)->higher_equal(TypePtr::NULL_PTR)) failed: NULL+offs not \
RAW address?
8038925 hotspot gc Java with G1 crashes in dump_instance_fields using jmap or \
jcmd without fullgc
8019324 hotspot runtime assert(_f2 == 0 || _f2 == f2) failed: illegal field change
8031290 hotspot runtime Adjust call to getisax() for additional words returned
8033696 hotspot runtime "assert(thread != NULL) failed: just \
checking" due to Thread::current() and JNI pthread interaction
8051012 hotspot runtime Regression in verifier for <init> method call \
from inside of a branch
8021804 security-libs java.security Certpath validation fails if validity \
period of root cert does not include validity period of intermediate cert
8050158 security-libs javax.net.ssl Introduce system property to maintain RC4 \
preference order
7047033 security-libs javax.smartcardio (smartcardio) Card.disconnect(boolean \
reset) does not reset when reset is true
7195480 security-libs javax.smartcardio javax.smartcardio does not detect \
cards on Mac OS X
8039319 security-libs javax.smartcardio (smartcardio) \
Card.transmitControlCommand() does not work on Mac OS X
8043507 security-libs javax.smartcardio (smartcardio) \
javax.smartcardio.CardTerminals.list() fails on MacOSX
8046343 security-libs javax.smartcardio (smartcardio) \
CardTerminal.connect('direct') does not work on MacOSX
8049250 security-libs javax.smartcardio (smartcardio) Need a flag to invert \
the Card.disconnect(reset) argument
8036709 tools jar Java 7 jarsigner displays warning about cert policy tree
8033113 xml jax-ws wsimport fails on WSDL:header parameter name customization
8029837 xml jaxp NPE seen in XMLDocumentFragmentScannerImpl.setProperty since \
7u40b33
7.0.71:
From: http://www.oracle.com/technetwork/java/javase/2col/7u71-bugfixes-2298226.html
Bug Id Category Subcategory Description
8032788 client-libs java.awt ImageIcon constructor throws an NPE and hangs \
when passed a null String parameter
8057184 client-libs javax.swing JCK8's \
api/javax_swing/JDesktopPane/descriptions.html#getset failed with GTKLookAndFeel \
on Linux and Solaris run v.s. JDK8+
8001105 core-libs java.lang.invoke findVirtual of Object[].clone produces \
internal error
8031502 core-libs java.lang.invoke JSR292: IncompatibleClassChangeError in \
LambdaForm for CharSequence.toString() method handle type converter
8027821 deploy For signed jars without manifest "Permissions", \
there is still security warning dialog before Application Error (Or blocked) \
Dialog.
8054904 deploy webstart Webstart cache path error for Java >= 7u65
8032883 deploy plugin java.lang.UnsupportedClassVersionError occurs while \
accessing an applet
8036620 deploy plugin JAR file is downloaded on \
DownloadService.removeResource, if it is not in Deployment Cache
8040786 deploy plugin Text is truncated in JavaScript to Java security \
warning dialog on OS X
8043478 deploy plugin Oracle Linux 5.x: Expired JRE disabled in the browser \
automatically and no native dialog prompting for the JRE update
8025726 deploy webstart Certificate rule in DRS does not work for Java Web \
Start app when caching is turned off
8051891 deploy webstart SWT cannot load native look&feel
8050485 hotspot runtime super() in a try block in a ctor may need to cause \
VerifyError
8027686 install Fail to install on MacOS 10.10
7160837 security-libs javax.crypto DigestOutputStream does not turn off \
digest calculation when "close()" is called
8028627 security-libs javax.crypto Unsynchronized code path from \
javax.crypto.Cipher to the WeakHashMap used by JceSecurity to store codebase \
mappings
8012026 client-libs java.awt [macosx] Component.getMousePosition() does not \
work in an applet on MacOS
8032078 client-libs java.awt [macosx] CPlatformWindow.setWindowState throws \
RuntimeException, if windowState=ICONIFIED:MAXIMIZED_BOTH
8032961 client-libs java.awt A JTextField of an applet loses the abillity to \
receive the focus under certain circumstances.
8032669 client-libs javax.swing Mouse release not being delivered to Swing \
component in 7u45
7122142 core-libs java.lang (ann) Race condition between isAnnotationPresent \
and getAnnotations
8005232 core-libs java.lang (JEP-149) Class Instance size reduction
7185456 core-libs java.lang.reflect (ann) Optimize Annotation handling in \
java/sun.reflect.* code for small number of annotationsC
8015421 core-libs java.net NegativeArraySizeException occurs in \
ChunkedOutputStream() with Integer.MAX_VALUE
8021372 core-libs java.net NetworkInterface.getNetworkInterfaces() returns \
duplicate hardware address
8009764 deploy webstart Java Web Start app run on Java SE 8 b79 shows \
"trust level" SecurityExceptions
7094099 deploy plugin DropDown List of JComboBox detached
6653795 hotspot compiler C2 intrinsic for Unsafe.getAddress performs pointer \
sign extension on 32-bit systems
8027359 xml jaxp XML parser returns incorrect parsing results
8032909 xml jaxp XSLT string-length returns incorrect length when string \
includes complementary chars
Files: