Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.2&buil... https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&qu... When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3m... to record your testing efforts and use bugzilla to report bugs. Packages changed: chromium (79.0.3945.79 -> 79.0.3945.88) exo (0.12.10 -> 0.12.11) java-11-openjdk (11.0.3.0 -> 11.0.5.0) libgcrypt === Details === ==== chromium ==== Version update (79.0.3945.79 -> 79.0.3945.88) - update to 79.0.3945.88: * CVE-2019-13767: Use after free in media picker (boo#1159498) ==== exo ==== Version update (0.12.10 -> 0.12.11) Subpackages: exo-data exo-helpers exo-lang exo-tools libexo-1-0 libexo-2-0 - Update to version 0.12.11 * Bump documentation dates * Add *.mo to .gitignore * Revert padding patches that add too much padding in the Thunar compact view (bxo#16196) ==== java-11-openjdk ==== Version update (11.0.3.0 -> 11.0.5.0) Subpackages: java-11-openjdk-headless - Update to upstream tag jdk-11.0.5-10 (October 2019 CPU, bsc#1154212) * Security fixes: + S8209901: Canonical file handling + S8213429, CVE-2019-2933: Windows file handling redux + S8218573, CVE-2019-2945: Better socket support + S8218877: Help transform transformers + S8219914: Change the environment variable for Java Access Bridge logging to have a directory. + S8220186: Improve use of font temporary files + S8220302, CVE-2019-2949: Better Kerberos ccache handling + S8221497: Optional Panes in Swing + S8221858, CVE-2019-2958: Build Better Processes + S8222684, CVE-2019-2964: Better support for patterns + S8222690, CVE-2019-2962: Better Glyph Images + S8223163: Better pattern recognition + S8223505, CVE-2019-2973: Better pattern compilation + S8223518, CVE-2019-2975: Unexpected exception in jjs + S8223886: Add in font table referene + S8223892, CVE-2019-2978: Improved handling of jar files + S8224025: Fix for JDK-8220302 is not complete + S8224062, CVE-2019-2977: Improve String index handling + S8224532, CVE-2019-2981: Better Path supports + S8224915, CVE-2019-2983: Better serial attributes + S8225286, CVE-2019-2987: Better rendering of native glyphs + S8225292, CVE-2019-2988: Better Graphics2D drawing + S8225298, CVE-2019-2989: Improve TLS connection support + S8225597, CVE-2019-2992: Enhance font glyph mapping + S8226765, CVE-2019-2999: Commentary on Javadoc comments + S8227601: Better collection of references + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations * Other fixes: + S6996807: FieldReflectorKey hash code computation can be improved + S8076988: reevaluate trivial method policy + S8087128: C2: Disallow definition split on MachCopySpill nodes + S8133489: Better messaging for PKIX path validation matching + S8139965: Hang seen when using com.sun.jndi.ldap.search.replyQueueSize + S8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size + S8148188: Enhance the security libraries to record events of interest + S8163363: AArch64: Stack size in tools/launcher/Settings.java needs to be adjusted + S8163511: Allocation of compile task fails with assert: "Leaking compilation tasks?" + S8170639: [Linux] jsig is limited to a maximum of 64 signals + S8177899: Tests fail due to code cache exhaustion on machines with many cores + S8180901: Transformer.reset() resets the state only once + S8193234: When using -Xcheck:jni an internally allocated buffer can leak + S8194231: java/net/DatagramSocket/ReuseAddressTest.java failed with java.net.BindException: Address already in use: Cannot bind + S8196681: Java Access Bridge logging and debug flags dynamically controlled + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5 + S8200365: TestOptionsWithRanges.java of '-XX:TLABWasteTargetPercent=100' fails intermittently + S8200400: Restrict Sasl mechanisms + S8202035: Archive the set of ModuleDescriptor and ModuleReference objects for observable system modules with unnamed initial module. + S8202252: (aio) Closed AsynchronousSocketChannel keeps completion handler alive + S8202952: C2: Unexpected dead nodes after matching + S8203629: Produce events in the JDK without a dependency on jdk.jfr + S8204203: Many pkcs11 tests failed in Provider initialization, after compiler on Windows changed + S8204521: compiler/jsr292/ /RedefineMethodUsedByMultipleMethodHandles.java fails trying to delete temp file + S8205421: AARCH64: StubCodeMark should be placed after alignment + S8205654: serviceability/dcmd/framework/HelpTest.java timed out + S8206074: nsk/jdi/EventRequestManager/createStepRequest/ /crstepreq001/TestDescription.java is timing out + S8206879: Currency decimal marker incorrect for Peru + S8207965: C2-only debug build fails + S8208269: Javadoc does not support module-info in a multi-release jar + S8208499: NMT: Missing memory tag for Safepoint polling page + S8208655: use JTreg skipped status in hotspot tests + S8208701: Fix for JDK-8208655 causes test failures in CI tier1 + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java fails to compile + S8208780: (se) test SelectWithConsumer.testReadableAndWriteable(): failure + S8209186: Rename SimpleThresholdPolicy to TieredThresholdPolicy + S8209413: AArch64: NPE in clhsdb jstack command + S8209420: Track membars for volatile accesses so they can be properly optimized + S8209684: Intrinsics that assume some input non null should use GraphKit::must_be_not_null() + S8209939: [testbug][ppc] Test SafepointPollingPages fails after 8208499 with UseSIGTRAP on. + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime barriers + S8210130: java/net/httpclient/UnknownBodyLengthTest.java failed + S8210314: [aix] NMT does not show "Safepoint" memory type + S8210389: C2: assert(n->outcnt() != 0 || C->top() == n || n->is_Proj()) failed: No dead instructions after post-alloc + S8210390: C2 still crashes with "assert(mode == ControlAroundStripMined && use == sfpt) failed: missed a node" + S8210408: Refactor java.util.ResourceBundle:i18n shell tests to plain java tests + S8210729: Clean up macosx static library handling + S8210919: Remove statically linked libjli on Windows + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/ /ap11t001/TestDescription.java failed with JVMTI_ERROR_INVALID_CLASS in CDS mode + S8210985: Update the default SSL session cache size to 20480 + S8211097: aix: fix build after JDK-8210919 + S8211232: GraphKit::make_runtime_call() sometimes attaches wrong memory state to call + S8211233: MemBarNode::trailing_membar() and MemBarNode::leading_membar() need to handle dying subgraphs better + S8211727: Adjust default concurrency settings for running tests on Sparc + S8212528: Wrong cgroup subsystem being used for some CPU Container Metrics + S8212970: TZ database in "vanguard" format support + S8212992: Change mirror accessor in Klass::verify_on() to use AS_NO_KEEPALIVE + S8213017: jspawnhelper: need to handle pipe write failure when sending return code + S8213117: adoptNode corrupts attribute values + S8213134: AArch64: vector shift failed with MaxVectorSize=8 + S8213172: CDS and JFR tests fail with assert(JdkJfrEvent::is(klass)) failed: invariant + S8213325: (props) Properties.loadFromXML does not fully comply with the spec + S8213406: (fs) More than one instance of built-in FileSystem observed in heap + S8213561: ZipFile/MultiThreadedReadTest.java timed out in tier1 + S8213734: SAXParser.parse(File, ..) does not close resources when Exception occurs. + S8214003: Limit default test jobs based on memory size + S8214096: sun.security.util.SignatureUtil passes null parameter, so JCE validation fails + S8214161: java.lang.IllegalAccessError: class jdk.internal.event.X509CertificateEvent (in module java.base) cannot access class jdk.jfr.internal.handlers.EventHandler (in module jdk.jfr) because module java.base does not read module jdk.jfr + S8214287: SpecJbb2005StressModule got uncaught exception + S8214579: JFrame does not paint content in XVFB / X11vnc environment + S8214687: Optimize Collections.nCopies().hashCode() and equals() + S8214702: Wrong text position for whitespaced string in printing Swing text + S8214770: java/time/test/java/time/format/ /TestNonIsoFormatter.java failed in non-english locales. + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot + S8214857: "bad trailing membar" assert failure at memnode.cpp:3220 + S8215044: C2 crash in loopTransform.cpp with assert(cl->trip_count() > 0) failed: peeling a fully unrolled loop + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8 + S8215265: C2: range check elimination may allow illegal out of bound access + S8215281: Use String.isEmpty() when applicable in java.base + S8215380: Backout accidental change to String::length + S8215451: JNI IsSameObject should not keep objects alive + S8215483: Off heap memory accesses should be vectorized + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094: Better loading of classloader classes + S8215534: [testbug] some jfr test don't check @requires vm.hasJFR + S8215694: keytool cannot generate RSASSA-PSS certificates + S8215756: Memory leaks in the AWT on macOS + S8215792: AArch64: String.indexOf generates incorrect result + S8215879: AArch64: ReservedStackAccess may leave stack guard in inconsistent state + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails intermittently + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on AArch64 + S8215982: (tz) Upgrade time-zone data to tzdata2018i + S8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java failing + S8216155: C4819 warning at libfreetype sources on Windows + S8216199: Local variable arg defined but never used in BCEscapeAnalyzer::compute_escape_for_intrinsic() + S8216205: Java API documentation formatting error in System.getEnv + S8216261: Javap ignores default modifier on interfaces + S8216326: SSLSocket stream close() does not close the associated socket + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved + S8216401: Allow "file:" URLs in Class-Path of local JARs + S8216427: ciMethodData::load_extra_data() does not always unpack the last entry + S8216528: test/jdk/java/rmi/transport/ /runtimeThreadInheritanceLeak/ /RuntimeThreadInheritanceLeak.java failing with Xcomp + S8216549: Mismatched unsafe access to non escaping object fails + S8216562: UnknownBodyLength sometimes fails due to "Connection reset by peer" + S8216987: ciMethodData::load_data() unpacks MDOs with non-atomic copy + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier() does not check for zero length on AARCH64 + S8217093: Support extended-length paths in parse_manifest.c on windows + S8217344: Make comparison overflow-aware in ECDHKeyAgreement.engineGenerateSecret() + S8217359: C2 compiler triggers SIGSEGV after transformation in ConvI2LNode::Ideal + S8217364: Custom URLStreamHandler for jrt or file protocol can override default handler + S8217366: ZoneStrings are not populated for all the Locales + S8217368: AArch64: C2 recursive stack locking optimisation not triggered + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764 (Update avx512 implementation) + S8217576: C1 atomic access handlers use incorrect decorators + S8217676: Upgrade libpng to 1.6.37 + S8217760: C2: Missing symbolic info on a call from intrinsics when invoked through MethodHandle + S8217766: Container Support doesn't work for some Join Controllers combinations + S8217785: Padding ParallelTaskTerminator::_offered_termination variable + S8217896: Make better use of LCPUs when building on AIX + S8217990: C2 UseOptoBiasInlining: load of markword optimized to 0 if running with -XX:-EliminateLocks + S8218163: C2: Continuous deoptimization w/ Reason_speculate_class_check and Action_none + S8218185: aarch64: missing LoadStore barrier in TemplateTable::putfield_or_static + S8218201: Failures when vmIntrinsics::_getClass is not inlined + S8218280: LineNumberReader throws "Mark invalid" exception if CRLF straddles buffer. + S8218553: Enhance keystore load debug output + S8218558: NMT stack traces in output should show mt component for virtual memory allocations + S8218566: NMT: missing memory tag for assert poison page + S8218581: Incorrect exception message generation + S8218682: [TEST_BUG] DashOffset fails in mach5 + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on Linux + S8218715: [TESTBUG] TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock WhiteBoxAPI + S8218721: C1's CEE optimization produces safepoint poll with invalid debug information + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2 implementation + S8218780: Update MUSCLE PCSC-Lite header files + S8218879: Keep track of memory accesses originated from Unsafe + S8218966: AArch64: String.compareTo() can read memory after string + S8219013: Update Apache Santuario (XML Signature) to version 2.1.3 + S8219241: Provide basic virtualization related info in the hs_error file on linux/windows x86_64 + S8219244: NMT: Change ThreadSafepointState's allocation type from mtInternal to mtThread + S8219370: NMT: Move synchronization primitives from mtInternal to mtSynchronizer + S8219513: compiler/codegen/aes/ /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc + S8219517: assert(false) failed: infinite loop in PhaseIterGVN::optimize + S8219562: Line of code in osContainer_linux.cpp L102 appears unreachable + S8219583: Windows build failure after JDK-8214777 (Avoid some GCC 8.X strncpy() errors in HotSpot) + S8219635: aarch64: missing LoadStore barrier in TemplateTable::fast_storefield + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool) + S8219919: RuntimeStub name lost with PrintFrameConverterAssembly + S8219993: AArch64: Compiled CI stubs are unsafely modified + S8219997: [TESTBUG] Create test for JFR events in Docker container: CPU, Memory and Process Info + S8220037: Inconsistencies of generated timezone files between Windows and Linux + S8220072: GCC 8.3 reports errors in java.base + S8220173: assert(_handle_mark_nesting > 1) failed: memory leak: allocating handle outside HandleMark + S8220227: Host Locale Provider getDisplayCountry returns error message under non-English Win10 + S8220313: [TESTBUG] Update base image for Docker testing to OL 7.6 + S8220341: Class redefinition fails with assert(!is_unloaded()) failed: unloaded method on the stack + S8220355: Improve assertion texts and exception messages in eventHandlerVMInit + S8220570: Additonal trace when native thread creation fails + S8220579: [Containers] SubSystem.java out of sync with osContainer_linux.cpp + S8220657: JFR.dump does not work when filename is set + S8220672: [TESTBUG] TestCPUSets should check that cpuset does not exceed available cores + S8220674: [TESTBUG] MetricsMemoryTester failcount test in docker container only works with debug JVMs + S8220682: Heap dumping and inspection fails with JDK-8214712 + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled + S8221120: CopyOnWriteArrayList.set should always have volatile write semantics + S8221220: AArch64: Add StoreStore membar explicitly for Volatile Writes in TemplateTable + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes + S8221325: Add information about swap space to print_memory_info() on MacOS + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix for JDK-8219562 + S8221342: [TESTBUG] Generate Dockerfile for docker testing + S8221407: Windows 32bit build error in libsunmscapi/security.cpp + S8221408: Windows 32bit build build errors/warnings in hotspot + S8221411: NullPointerException in RasterPrinterJob without PrinterResolution + S8221434: Fix typo in lib-x11 autoconf error message about missing headers + S8221480: jcmd VM.metaspace shall print limits in basic mode + S8221497: Optional Panes in Swing + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded reference to JDK 10 + S8221529: [TESTBUG] Docker tests use old/deprecated image on AArch64 + S8221710: [TESTBUG] more configurable parameters for docker testing + S8221725: AArch64 build failures after JDK-8221408 (Windows 32bit build build errors/warnings in hotspot) + S8221730: jcmd process name matching broken + S8221801: Update src/java.base/share/legal/public_suffix.md + S8221892: ThreadPoolExecutor: Thread.isAlive() is not equivalent to not being startable + S8221894: Add comments for docker tests in the test doc + S8222108: Reduce minRefreshTime for updating remote printer list on Windows + S8222154: upgrade gtest to 1.8.1 + S8222280: Provide virtualization related info in the hs_error file on AIX + S8222299: [TESTBUG] move hotspot container tests to hotspot/containers + S8222362: Upgrade to Freetype 2.10.0 + S8222387: Out-of-bounds access to CPU _family_id_xxx array + S8222415: Xerces 2.12.0: Parsing Configuration + S8222670: pathological case of JIT recompilation and code cache bloat + S8222720: Provide extended VMWare/vSphere virtualization related info in the hs_error file on linux/windows x86_64 + S8222743: Xerces 2.12.0: DOM Implementation + S8222914: Partial backport of JDK-8218266 + S8222968: ByteArrayPublisher is not thread-safe resulting in broken re-use of HttpRequests + S8222980: Upgrade IANA Language Subtag Registry to Version 2019-04-03 + S8222987: sun/security/tools/keytool/PSS.java times out on Solaris-SPARC + S8222991: Xerces 2.12.0: Validation + S8223177: Data race on JvmtiEnvBase::_tag_map in double-checked locking + S8223227: Rename acquire_tag_map() to tag_map_acquire() in jvmtiEnvBase + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator + S8223336: Assert in VirtualMemoryTracker::remove_released_region when running the SharedArchiveConsistency.java test with - XX:NativeMemoryTracking=detail + S8223482: Unsupported ciphersuites may be offered by a TLS client + S8223518: Unexpected exception in jjs + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails with Agent timeout frequently + S8223553: Fix code constructs that do not compile with the Eclipse Java Compiler + S8223572: ~ThreadInVMForHandshake() should call handle_special_runtime_exit_condition() + S8223574: add more thread-related system settings info to hs_error file on AIX + S8223660: jtreg: Decouple Unsafe from RTM tests + S8223814: SA: jhsdb common help needs to be more detailed + S8223886: Add in font table referene + S8224033: os::snprintf should be used in virtualizationSupport.cpp + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler fails intermittently for case 13 on Windows + S8224090: [PPC64] Fix SLP patterns for filling an array with double float literals + S8224165: [TESTBUG] Docker tests produce excessive output + S8224181: On child process spawn, child may write to random file descriptor instead of the fail pipe + S8224202: Speed up Properties.load + S8224221: add memprotect calls to event log + S8224230: [PPC64, s390] Support AsyncGetCallTrace + S8224252: [TESTBUG] hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is timing out again after fix for JDK-8163805 + S8224487: outputStream should not be copyable + S8224531: SEGV while collecting Klass statistics + S8224558: Fix replicateB encoding + S8224560: (tz) Upgrade time-zone data to tzdata2019a + S8224580: Matcher can cause oop field/array element to be reloaded + S8224589: Improve startup behavior of SecurityProperties + S8224658: Unsafe access C2 compile fails with assert(flat != TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr: adr_type = NULL + S8224698: ConcurrentSkipListMap.java does not compile with the Eclipse Java Compiler + S8224825: java/awt/Color/AlphaColorTest.java fails in linux-x64 system + S8224838: Bump update version for OpenJDK: jdk-11.0.5 + S8224991: Problemlist javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java + S8225005: Xerces 2.12.0: License file + S8225141: Better handling of classes in error state in fast class initialization checks + S8225178: [Solaris] os::signal() should call sigaction() with SA_SIGINFO + S8225189: Multiple JNI calls within critical region in ZIP Library + S8225257: sun/security/tools/keytool/PSS.java timed out + S8225286: Better rendering of native glyphs + S8225298: Improve TLS connection support + S8225347: [s390] Unexpected exit from stack overflow test + S8225386: test for JDK-8216261 fails in Windows + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0 cause crash. + S8225390: ProblemList sun/security/pkcs11/sslecc/ /ClientJSSEServerJSSE.java due to JDK-8161536 + S8225423: GTK L&F: JSplitPane: There is no divider shown + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find dependent libraries + S8225543: Jcmd fails to attach to the Java process on Linux using the main class name if whitespace options were used to launch the process + S8225580: tzdata2018i integration causes test failures on jdk-13 + S8225636: SA can't handle prelinked libraries + S8225644: C1 dumps incorrect class name in ClassCastException message + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker native function + S8225715: jhsdb jmap fails to write binary heap dump of a jshell process + S8226409: Enable argument profiling for sun.misc.Unsafe.put*/get* + S8226468: [aix] loadquery failed error message displayed + S8226530: ZipFile reads wrong entry size from ZIP64 entries + S8226543: Reduce GC pressure during message digest calculations in password-based encryption + S8226607: Inconsistent info between pcsclite.md and MUSCLE headers + S8226798: JVM crash in klassItable::initialize_itable_for_interface(int, InstanceKlass*, bool, Thread*) + S8226964: [Yaru] GTK L&F: There is no difference between menu selected and de-selected + S8227011: Starting a JFR recording in response to JVMTI VMInit and / or Java agent premain corrupts memory + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a memory leak + S8227117: normal interpreter table is not restored after single stepping with TLH + S8227247: tools/sjavac/IdleShutdown.java fails with AssertionError: Error too big on windows + S8227277: HeapInspection::find_instances_at_safepoint walks dead objects + S8227392: Colors with alpha are painted incorrectly on Linux, after JDK-8214579 + S8227594: sadebugd/DebugdConnectTest.java fails due to "java.rmi.NotBoundException: SARemoteDebugger" + S8227630: adjust format specifiers in loadlib_aix.cpp + S8227834: build.log output from failing commands : include the hs_error file path in case of crashes in build + S8227869: fix wrong format specifiers in os_aix.cpp + S8227919: 8213232 causes crashes on solaris sparc64 + S8228337: problemList failing/ignored manual tests in security-libs + S8228400: Remove built-in AArch64 simulator + S8228469: (tz) Upgrade time-zone data to tzdata2019b + S8228485: JVM crashes when bootstrap method for condy triggers loading of class whose static initializer throws ve thread creation fails + S8220579: [Containers] SubSystem.ja exception + S8228501: java_props_macosx.c - provide missing CFRelease for CFLocaleCopyCurrent + S8228578: fix CFData object leak in macosx KeystoreImpl.m + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java - NumberFormatException because of large long values (memory limit_in_bytes) + S8228596: Class redefinition fails when condy instructions are removed + S8228601: AArch64: Fix interpreter code at JVMCI deoptimization entry + S8228618: s390: c1/c2 fail to add a metadata relocation in the static call stub. + S8228649: [PPC64] SA reads wrong slots from interpreter frames + S8228658: test GetTotalSafepointTime.java fails on fast Linux machines with Total safepoint time 0 ms + S8228711: Path rendered incorrectly when it goes outside the clipping region + S8228725: AArch64: Purge method call format support + S8228764: New library dependencies due to JDK-8222720 + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on AArch64 + S8229352: Use of an uninitialized register in 32-bit ARM template interpreter + S8229406: ZGC: Fix incorrect statistics + S8229767: Typo in java.security: Sasl.createClient and Sasl.createServer + S8229773: Resolve permissions for code source URLs lazily + S8229887: (zipfs) zip file corruption when replacing an existing STORED entry + S8229925: [s390, PPC64] Exception check missing in interpreter + S8230085: (fs) FileStore::isReadOnly is always true on macOS Catalina + S8230099: Prepare for backport of JDK-8217368 + S8230728: Thin stroked shapes are not rendered if affine transform has flip bit + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails intermittently + S8231693: Backout "8230728: Thin stroked shapes are not rendered if affine transform has flip bit" from jdk11u - Modified patch: * system-pcsclite.patch + adapt to changed context - Update to upstream tag jdk-11.0.4+11 (July 2019 CPU) * Security fixes + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC Implementation + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol handling + S8213432, CVE-2019-2769, bsc#1141783: Better copies of CopiesList + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege usage + S8217563: Improve realm maintenance + S8218863: Better endpoint checks + S8218873: Improve JSSE endpoint checking + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support options + S8219775: Certificate validation improvements + S8220517: Enhanced GIF support + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation * Other fixes + S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32 bit process address space + S8139178: Wrong fontMetrics when printing in Landscape (OpenJDK) + S8163805: hotspot/test/serviceability/sa/sadebugd/ /SADebugDTest.java failed with timed out + S8170494: JNI exception pending in PlainDatagramSocketImpl.c + S8174691: [TESTBUG] A number of native hotspot unit tests fail when executed in stand-alone mode + S8179098: Crypto AES/ECB encryption/decryption performance regression (introduced in jdk9b73) + S8181143: Introduce diagnostic flag to abort VM on too long VM operations + S8188133: C2: Static field accesses in clinit can trigger deoptimizations + S8190361: Incorrect version info in jaccessinspector.exe and jaccesswalker.exe + S8195793: Remove GTE CyberTrust Global Root + S8200286: (testbug) MOptionTest test fails with java.lang.AssertionError: Classfiles too old! + S8200613: SA: jstack throws UnmappedAddressException with a CDS core file + S8201317: X25519/X448 code improvements + S8201633: Problems with AES-GCM native acceleration + S8202353: os::readdir should use readdir instead of readdir_r + S8202414: Unsafe write after primitive array creation may result in array length change + S8202651: Test ComodoCA.java fails + S8202794: Native Unix code should use readdir rather than readdir_r + S8202884: SA: Attach/detach might fail on Linux if debugee application create/destroy threads during attaching + S8203627: Swing applications with JRadioButton and JCheckbox fail to render correctly when using GTK3 and the GTK L&F + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java fails when running in CDS mode + S8205574: Loop predication "assert(f <= 1 && f >= 0) failed Incorrect frequency" + S8205611: Improve the wording of LinkageErrors to include module and class loader information + S8206955: MethodHandleProxies.asInterfaceInstance does not support default methods + S8207340: (fs) UnixNativeDispatcher close and readdir usages should be fixed + S8207748: Fix for 8202794 breaks tier1 builds + S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ? + S8208634: Add x-IBM-1129 charset + S8208648: ECC Field Arithmetic Enhancements + S8208702: javax/swing/reliability/ /HangDuringStaticInitialization.java may hang on macos + S8208996: X11 icon window color handing bug + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler seems to use WeakHashMap incorrectly + S8209414: AArch64: method handle invocation does not respect JVMTI interp_only mode + S8209415: Fix JVMTI test failure HS202 + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry on failure + S8209914: javadoc search sometimes generates bad URIs + S8209951: Problematic sparc intrinsic: com.sun.crypto.provider.CipherBlockChaining + S8210008: custom extension for make/SourceRevision.gmk + S8210197: javac can't tell during speculative attribution if a diamond expression is creating an anonymous inner class or not + S8210283: Support git as an SCM alternative in the build + S8210320: PPC64: Fix uninitialized variable in C1 LIR assembler code + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle) + S8210483: AssertionError in DeferredAttr at setOverloadKind caused by JDK-8203679 + S8210519: build/releaseFile/CheckSource.java failed additional sources found + S8210739: Calling JSpinner's setFont with null throws NullPointerException + S8210782: Upgrade HarfBuzz to the latest 2.3.1 + S8210803: Compilation failure in codeBlob.cpp for Windows 32-bit + S8210837: Add libXrandr-devel to the Linux devkits + S8210863: Remove Xrandr include files from JDK sources + S8210880: Remove HPKeysym.h from JDK sources + S8210886: Remove references in xwindows.md to non-existent files. + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32 mistakenly set the crc32 value into size field + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in ZipFSTester.checkRead(): bound must be positive + S8211350: Remove jprt support + S8211393: Memory leak issue on awt_InputMethod.c + S8211435: Exception in thread "AWT-EventQueue-1" java.lang.IllegalArgumentException: null source + S8211698: Crash in C2 compiled code during execution of double array heavy processing code + S8211810: X11 Time stamp data should be unsigned + S8211826: StringIndexOutOfBoundsException happens via GetStringUTFRegion() + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not compile (aix) + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java searching for wrong paths + S8211971: Move security/cacerts/VerifyCACerts.java and security/CheckBlacklistedCerts.java + S8212202: [Windows] Exception if no printers are installed. + S8212205: VM asserts after CDS archive has been unmapped + S8212562: To remove lib/security from test/jdk/TEST.groups + S8212676: AWT SystemColor setting on CDE + S8212677: X11 default visual support for IM status window on VNC + S8212678: Windows IME related patch + S8212794: IBM-964 is required for AIX default charset + S8212828: (process) Provide a way for Runtime.exec to use posix_spawn on linux + S8213015: Inconsistent settings between JFR.configure and - XX:FlightRecorderOptions + S8213213: Remove src/java.desktop/unix/classes/sun/awt/ /X11/keysym2ucs.h + S8213232: Unix/X11 setCompositionEnableNative issue + S8213292: Input freezes after MacOS key-selector (press&hold) usage on macOS Mojave + S8213294: Upgrade IANA LSR data + S8213515: Improve freetype detection on linux/ppc64/ppc64le/ /s390x + S8213614: DnD operation change feature does not work with 64bit big endian CPU + S8213617: JFR should record the PID of the recorded process + S8213618: IBM970 charset has missing entry and remove unexpected entries + S8213825: assert(false) failed: Non-balanced monitor enter/exit! Likely JNI locking + S8213944: Fix AIX build after the removal of Xrandr.h and add a configure check for it + S8214002: Cannot use italic font style if the font has embedded bitmap + S8214109: XToolkit is not correctly displayed color on 16-bit high color setting + S8214111: There is no icon in all JOptionPane target image + S8214112: The whole text in target JPasswordField image are not selected + S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3 + S8214253: Tooltip is transparent rather than having a black background + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1 + S8214533: IBM-29626C is required for AIX default charset + S8214765: All TrayIcon MessageType icons does not show up with gtk3 option set + S8214935: Upgrade IANA LSR data + S8215026: Incorrect amount of memory unmapped with ImageFileReader::close() + S8215123: Crash in runtime image built with jlink --compress=2 + S8215284: Reduce noise induced by periodic task getFileSize() + S8215296: do not disable c99 on Solaris + S8215342: [Zero] Build fails after JDK-8200613 + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while using Swing-FX interop + S8215374: 32-bit build failures after JDK-8181143 (Introduce diagnostic flag to abort VM on too long VM operations) + S8215398: -Xlog option usage => Invalid decorator '\temp\app_cds.log'. + S8215443: The use of TransportContext.fatal() leads to bad coding style + S8215472: (zipfs) Cleanups in implementation classes of jdk.zipfs and tests + S8215707: [macosx] fix pthread_getschedparam and pthread_setschedparam calls + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate() computes wrong IDOM + S8215790: Delegated task created by SSLEngine throws java.nio.BufferUnderflowException + S8216045: The size of key_exchange may be wrong on FFDHE + S8216355: missing NULL checks in libnet in interface iteration and potential resource leak in getMacAddress + S8216556: Unnecessary liveness computation with JVMTI + S8216577: Add GlobalSign's R6 Root certificate + S8216597: SIGBUS in Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047 + S8216970: condy causes JVM crash + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak) after JDK-8216597 (SIGBUS error in getNativeKeyInfo) + S8217094: HttpClient SSL race if a socket IOException is raised before ALPN is available + S8217263: Automate DashOffset test + S8217311: Improve Exception thrown when MulticastSocket.setInterface fails on AIX(Unix) + S8217564: idempotent protection missing in crc32c.h + S8217647: JFR: recordings on 32-bit systems unreadable + S8217690: Update public suffix version + S8217707: JNICALL declaration breaks Splash screen functions + S8217765: Internal Error (javaCalls.cpp:61) guarantee(thread->can_call_java()) failed + S8217786: Provide virtualization related info in the hs_error file on linux s390x + S8217878: ENVELOPING XML signature no longer works in JDK 11 + S8217879: hs_err should print more instructions in hex dump + S8217880: AIX build issue after JDK-8214533 + S8218020: Fix version number in mesa.md 3rd party legal file + S8218060: JDK-8217786 breaks build due to remaining unused function + S8218063: JDK-8218060 breaks build for S390 + S8218152: [javac] fails and exits with no error if a bad annotation processor provided + S8218469: JSlider display issue with slider for GTKLookAndFeel + S8218470: JScrollBar display issue with GTKLookAndFeel + S8218472: JProgressBar display issue with GTKLookAndFeel + S8218473: JOptionPane display issue with GTKLookAndFeel + S8218479: JTextPane display issue with GTKLookAndFeel + S8218618: Program fails when using JDK addressed by UNC path and using Security Manager + S8218629: XML Digital Signature throws NAMESPACE_ERR exception on OpenJDK 11, works 8/9/10 + S8218674: HTML Tooltip with "img=src" on component doesn't show + S8218733: SA: CollectedHeap provides broken implementation for used() and capacity() + S8218781: Localized names for Japanese era Reiwa in COMPAT provider + S8218811: replace open by os::open in hotspot coding + S8218854: FontMetrics.getMaxAdvance may be less than the maximum FontMetrics.charWidth + S8218960: CONFIG level logging statements printed in CLDRCalendarDataProviderImpl.java even when default log Level is INFO + S8218991: s390: Add intrinsic for GHASH algorithm + S8219006: AArch64: Register corruption in slow subtype check + S8219011: Implement MacroAssembler::warn method on AArch64 + S8219112: name_and_sig_as_C_string usages in frame_s390 miss ResourceMark + S8219335: "failed: unexpected type" assert failure in ConnectionGraph::split_unique_types() with unsafe accesses + S8219389: Delegated task created by SSLEngine throws BufferUnderflowException + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with core generated by gcore + S8219448: split-if update_uses accesses stale idom data + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional to stack allocated MacroAssembler + S8219566: JFR did not collect call stacks when MaxJavaStackTraceDepth is set to zero + S8219574: Minimal VM build failure after JDK-8219414 + S8219582: PPC: Crash after C1 checkcast patched and GC + S8219584: Try to dump error file by thread which causes safepoint timeout + S8219698: aarch64: SIGILL triggered when specifying unsupported hardware features + S8219710: Bump update version for OpenJDK: jdk11.0.4 + S8219746: Provide virtualization related info in the hs_error file on linux ppc64 / ppc64le + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/ /model/completionfailure/SymbolsDontCumulate.java in Standalone mode + S8219918: ProblemList hotspot tests failing in SAP testing. + S8220165: Encryption using GCM results in RuntimeException- input length out of bound + S8220166: Performance regression in deserialization (4-6% in SPECjbb) + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail on x86_32 due to missing SHA512 stubs + S8220281: IBM-858 alias name is missing on IBM00858 charset + S8220293: Deadlock in JFR string pool + S8220349: The fix done for JDK-8214253 have caused issues in JTree behaviour + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot without UnlockDiagnosticVMOptions + S8220374: C2: LoopStripMining doesn't strip as expected + S8220441: [PPC64] Clobber memory effect missing for memory barriers in atomics + S8220495: Update GIFlib library to the 5.1.8 + S8220513: Wrapper Key may get deleted when closing sessions in SunPKCS11 crypto provider + S8220625: tools/javac/classreader/8171132/ /BadConstantValue.java failed with "did not see expected error" + S8220707: [TESTBUG] serviceability/sa/ /TestHeapDumpForLargeArray.java fails with jtreg - vmoption:-Xmx < 8g + S8220714: C2 Compilation failure when accessing off-heap memory using Unsafe + S8220718: Missing ResourceMark in nmethod::metadata_do + S8220781: linux-s390 : os::get_summary_cpu_info gives bad output + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to illegal address + S8221083: [ppc64] Wrong oop compare in C1-generated code + S8221175: Fix bad function case for controlled JVM crash on PPC64 big-endian + S8221244: Unexpected behavior of PropertyDescription.getReadMethod for boolean properties + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use + S8221304: Problem list java/awt/FontMetrics/ /MaxAdvanceIsMax.java + S8221400: java/lang/String/StringRepeat.java test requests too much heap + S8221401: java/math/BigInteger/LargeValueExceptions.java test should be disabled on 32-bit platforms + S8221412: lookupPrintServices() does not always update the list of Windows remote printers + S8221437: assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method()) == m()) failed: Should not change after link resolution + S8221470: Print methods in exception messages in java-like Syntax. + S8221479: Fix JFR profiling on s390 + S8221483: TestOopCmp.java fails due to "Multiple garbage collectors selected" + S8221535: add steal tick related information to hs_error file [linux] + S8221610: Resurrect (legacy) JRE bundle target + S8221639: [i386] expand_exec_shield_cs_limit workaround is undefined code after JDK-8199717 + S8221833: Readability check in Symbol::is_valid not performed for some addresses + S8221870: use driver to run CtwRunner in applications/ctw tests + S8221880: Better customization for Windows RC properties FileDescription and ProductName + S8221915: cleanup ticks related coding in os_perf_aix.cpp [aix] + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit platforms + S8221924: get(null) on single-entry unmodifiable Map returns null instead of throwing NPE + S8222027: java/util/logging/LogManager/TestLoggerNames.java generates intermittent ClassCastException + S8222032: x86_32 fails with "wrong size of mach node" on AVX-512 machine + S8222089: [TESTBUG] sun/security/lib/cacerts/ /VerifyCACerts.java fails due to cert within 90-day expiry window + S8222133: Add temporary exceptions for root certs that are due to expire soon + S8222136: Remove two Comodo root CA certificates that are expiring + S8222137: Remove T-Systems root CA certificate + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to garbled registers + S8222410: java/nio/file/attribute/BasicFileAttributeView/ /UnixSocketFile hangs when "nc" does not accept "-U" + S8222522: Add configure options for Mac Bundle creation + S8222532: (zipfs) Performance regression when writing ZipFileSystem entries in parallel + S8222913: Add Jib support for VERSION_EXTRA* + S8222930: ConcurrentSkipListMap.clone() shares size variable between original and clone + S8223266: PPC64: Check for branch to illegal address before checking for mem serialization + S8223395: PPC64: Improve comments in the JVM signal handler to match ISA text + S8223499: Remove two DocuSign root certificates that are expiring + S8223555: Cleanups in cacerts tests + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException: CHECK_FAILED! (getAttribute.crc <entries20> failed 6af4413c vs 0 ...) + S8223665: SA: debugd options should follow jhsdb style + S8224474: harfbuzz 2.3.1 code fails to compile with gcc 4.4.7 + S8224671: AArch64: mauve System.arraycopy test failure + S8224727: Problem list test security/infra/java/security/cert/ /CertPathValidator/certification/ActalisCA.java + S8224828: aarch64: rflags is not correct after safepoint poll + S8224880: AArch64: java/javac error with AllocatePrefetchDistance + S8225402: events logging in deoptimization.cpp should go to deopt-log + S8225716: G1 GC: Undefined behaviour in G1BlockOffsetTablePart::block_at_or_preceding + S8226876: Assertion in sun/util/locale/provider/ /CalendarDataUtility on Windows after JDK-8218960 + S8226880: Backport of JDK-8208698 (Improved ECC Implementation) should not bring parts of JDK-8205476 (KeyAgreement#generateSecret is not reset for ECDH based algorithm) - Do not fail installation when the manpages are not present (bsc#1115375) - Added patch: * JDK-8208602.patch + Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461) - Provide and Obsolete the corresponding java-10-openjdk-<sub> packages to assure smooth upgrade (fate#326347, bsc#1137264) ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit - Fix tests in FIPS mode: * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem * Add patch libgcrypt-fix-tests-fipsmode.patch - Fix test dsa-rfc6979 in FIPS mode: * Disable tests in elliptic curves with 192 bits which are not recommended in FIPS mode * Add patch libgcrypt-dsa-rfc6979-test-fix.patch - CMAC AES and TDES FIPS self-tests: * CMAC AES self test missing [bsc#1155339] * CMAC TDES self test missing [bsc#1155338] - Add libgcrypt-CMAC-AES-TDES-selftest.patch - Security fix: [bsc#1148987,CVE-2019-13627] * Mitigation against an ECDSA timing attack * Added libgcrypt-CVE-2019-13627.patch -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org