July 2015


The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as a PulseAudio sound driver, the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 6 support in the 1.13.x series with the July 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

Please Note: This release includes a backport of jdk.tls.ephemeralDHKeySize which changes the default for Diffee-Hellman ephemeral keys to 1024-bit (CVE-2015-4000). To use the previous default (768-bit keys), pass -Djdk.tls.ephemeralDHKeySize=legacy on the command-line. All current releases of IcedTea 1.x and 2.x, along with OpenJDK 8, allow the use of “matched” mode which creates an ephemeral DH key matching the size of the authentication key, or the specification of an explicit key size between 1024 and 2048 bits inclusive (e.g. -Djdk.tls.ephemeralDHKeySize=1536).

What’s New?

New in release 1.13.8 (2015-07-29)

  • Security fixes
  • Import of OpenJDK6 b36
    • OJ58: Allow OpenJDK to build on PaX-enabled kernels
    • OJ59: Only apply PaX-marking when needed by a running PaX kernel
    • OJ61: Remove translation strings for ErrorMsg.JAXP_INVALID_ATTR_VALUE_ERR which doesn’t exist in OpenJDK 6
    • OJ62, PR2552: Restrict key size of RSA certificates to >= 1024
    • OJ63: Remove @Override annotation on interfaces added by 2015/07/14 security fixes.
    • S6787645: CRL validation code should permit some clock skew when checking validity of CRLs
    • S6996365: Evaluate the priorities of cipher suites
    • S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
    • S8007142: Add utility classes for writing better multiprocess tests in jtreg
    • S8008089: Delete OS dependent check in JdkFinder.getExecutable()
    • S8024861: Incomplete token triggers GSS-API NullPointerException
    • S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
    • S8036786: Update jdk7 testlibrary to match jdk8
    • S8042205: javax/management/monitor/*: some tests didn’t get all the notifications
    • S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
    • S8043200, PR2485: Decrease the preference mode of RC4 in the enabled cipher suite list
    • S8043201: Deprecate RC4 in SunJSSE provider
    • S8046817: JDK 8 schemagen tool does not generate xsd files for enum types
    • S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
    • S8050158: Introduce system property to maintain RC4 preference order
    • S8062923: XSL: Run-time internal error in ‘substring()’
    • S8062924: XSL: wrong answer from substring() function
    • S8064546: CipherInputStream throws BadPaddingException if stream is not fully read
    • S8065764: javax/management/monitor/CounterMonitorTest.java hangs
    • S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java hangs
    • S8073357: schema1.xsd has wrong content. Sequence of the enum values has been changed
    • S8073385: Bad error message on parsing illegal character in XML attribute
    • S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on Solaris Sparc
    • S8074297: substring in XSLT returns wrong character if string contains supplementary chars
    • S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java failed in certain env.
    • S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java failed in certain env.
    • S8075667: (tz) Support tzdata2015b
    • S8076290: JCK test api/xsl/conf/string/string17 starts failing after JDK-8074297
    • S8077685: (tz) Support tzdata2015d
    • S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
    • S8078439: SPNEGO auth fails if client proposes MS krb5 OID
    • S8078666, PR2327: JVM fastdebug build compiled with GCC 5 asserts with “widen increases”
    • S8080318: jdk8u51 l10n resource file translation update
    • S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh test has RC4 dependencies
    • S8081775: two lib/testlibrary tests are failing with “Error. failed to clean up files after test” with jtreg 4.1 b12
  • Backports
    • S4890063,PR2306, RH1214835: HPROF: default text truncated when using doe=n option
    • S6562614, PR2555: Compiler warnings for gettimeofday in Inet4/Inet6AddressImpl.c
    • S6956398, PR2486: make ephemeral DH key match the length of the certificate key
    • S6989466, PR2555: Miscellaneous compiler warnings in java/lang, java/util, java/io, sun/misc native code
    • S6991580, PR2309: IPv6 Nameservers in resolv.conf throws NumberFormatException
    • S6997561, PR2479: A request for better error handling in JNDI
    • S7007905, PR2298: javazic produces wrong line numbers
    • S7017176, PR2479: Several JNDI tests are mssing GPL header
    • S7058708, PR2298: Eliminate JDK build tools build warnings
    • S7069870, PR2298: Parts of the JDK erroneously rely on generic array initializers with diamond
    • S7090844, PR2298: Support a timezone whose offset is changed more than once in the future
    • S7094377, PR2479: Com.sun.jndi.ldap.read.timeout doesn’t work with ldaps.
    • S7133138, PR2298: Improve io performance around timezone lookups
    • S7170638, PR2495: Use DTRACE_PROBE[N] in JNI Set and SetStatic Field.
    • S8000487, PR2479: Java JNDI connection library on ldap conn is not honoring configured timeout
    • S8011709, PR2510: [parfait] False positive: memory leak in jdk/src/share/native/sun/font/layout/CanonShaping.cpp
    • S8023052, PR2510: JVM crash in native layout
    • S8039921, PR2468: SHA1WithDSA with key > 1024 bits not working
    • S8041451, PR2480: com.sun.jndi.ldap.Connection:ReadTimeout should abandon ldap request
    • S8042855, PR2510: [parfait] Potential null pointer dereference in IndicLayoutEngine.cpp
    • S8042857, PR2479: 14 stuck threads waiting for notification on LDAPRequest
    • S8065238, PR2479: javax.naming.NamingException after upgrade to JDK 8
    • S8074761, PR2469: Empty optional parameters of LDAP query are not interpreted as empty
    • S8078654, PR2334: CloseTTFontFileFunc callback should be removed
    • S8081315, PR2406: Avoid giflib interlacing workaround with giflib 5.0.0 on
    • S8081475, PR2495: SystemTap does not work when JDK is compiled with GCC 5
    • S8087120, RH1206656, PR2554: [GCC5] java.lang.StackOverflowError on Zero JVM initialization on non x86 platforms.
  • Bug fixes
    • PR2319: Checksum of policy JAR files changes on every build
    • PR2340: Fail early if there is no native HotSpot JIT & all other options are disabled
    • PR2342: Update README & INSTALL files
    • PR2360: Ensure all stamp targets have aliases
    • PR2391: Make elliptic curve removal optional
    • PR2460: Policy JAR files should be timestamped with the date of the policy file they hold
    • PR2481, RH489586, RH1236619: OpenJDK can’t handle spaces in zone names in /etc/sysconfig/clock
    • PR2486: JSSE server is still limited to 768-bit DHE
    • PR2508, G541462: Only apply PaX markings by default on running PaX kernels
    • PR2556, G390663: Update Gentoo font configuration and allow font directory to be specified
    • PR2559: generated directory gets confused with generated alias
    • PR2565: Replace ipv4-mapped-ipv6-addresses.patch with upstream fix 6882910
  • CACAO
    • PR829: Raise javadoc and JAVAC_FLAGS memory limits for CACAO
  • JamVM
    • PR2522: Add executable stack markings to callNative.S on JamVM

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • 05fd1584e458ddaaf1d464842431dbcbcbaf7f9ef9f92f9cebaa180ccbbc5d1b icedtea6-1.13.8.tar.gz
  • 27fe15966c69d40f3ccec392b6725aafe81fcbd14fd698067a46eff23cb94620 icedtea6-1.13.8.tar.gz.sig
  • 1af0e21b109b58d27ce063696b42f1cdded0f829f51440f716540bec138355ed icedtea6-1.13.8.tar.gz.sig.ec
  • fcbc623957e393a00d6189cb88288fed21c21860485092ea7719a12fbbc00adb icedtea6-1.13.8.tar.xz
  • 95dad7fbcb133e461e557fbe343f0cf27aeb2972cce58ad9184c71e0bc9431c1 icedtea6-1.13.8.tar.xz.sig
  • 2b4f32188d5631c0bc3f0168099cd903b09f7b6832b82c2060b6b8003de1567c icedtea6-1.13.8.tar.xz.sig.ec

The checksums can be downloaded from:

A 1.13.8 ebuild for Gentoo is available.

The following people helped with these releases:

  • James Le Cuirot (PR829 CACAO work)
  • Andrew Hughes (all backports and other bug fixes, release management)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea6-1.13.8.tar.gz

or:

$ tar x -I xz -f icedtea6-1.13.8.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea6-1.13.8/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.5.x series with the July 2015 security fixes. This is the last release in the 2.5.x series.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

Please Note: The backport of jdk.tls.ephemeralDHKeySize now defaults to 1024-bit keys (CVE-2015-4000). To use the previous default (768-bit keys), pass -Djdk.tls.ephemeralDHKeySize=legacy on the command-line. Both OpenJDK 7 & 8 allow the use of “matched” mode which creates an ephemeral DH key matching the size of the authentication key, or the specification of a key size between 1024 and 2048 bits inclusive.

What’s New?

New in release 2.5.6 (2015-07-22)

  • Security fixes
  • Backports
    • S4890063, PR2305, RH1214835: HPROF: default text truncated when using doe=n option
    • S6991580, PR2308: IPv6 Nameservers in resolv.conf throws NumberFormatException
    • S7124253: [macosx] Flavor change notification not coming
    • S8007219: [macosx] Frame size reverts meaning of maximized attribute if frame size close to display
    • S8013581: [macosx] Key Bindings break with awt GraphicsEnvironment setFullScreenWindow
    • S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
    • S8021120, PR2301: TieredCompilation can be enabled even if TIERED is undefined
    • S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
    • S8027561: [macosx] Cleanup “may not respond to selector” warnings in native code
    • S8029607, PR2418: Type of Service (TOS) cannot be set in IPv6 header
    • S8029868: Fix KSS issues in sun.lwawt.macosx
    • S8039921, PR2421: SHA1WithDSA with key > 1024 bits not working
    • S8042205: javax/management/monitor/*: some tests didn’t get all the notifications
    • S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
    • S8043201: Deprecate RC4 in SunJSSE provider
    • S8043129, PR2338: JAF initialisation in SAAJ clashing with the one in javax.mail
    • S8046817: JDK 8 schemagen tool does not generate xsd files for enum types
    • S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
    • S8048212, PR2418: Two tests failed with “java.net.SocketException: Bad protocol option” on Windows after 8029607
    • S8048214, PR2357: Linker error when compiling G1SATBCardTableModRefBS after include order changes
    • S8062923: XSL: Run-time internal error in ‘substring()’
    • S8062924: XSL: wrong answer from substring() function
    • S8064546: CipherInputStream throws BadPaddingException if stream is not fully read
    • S8065238, PR2478: javax.naming.NamingException after upgrade to JDK 8
    • S8065764: javax/management/monitor/CounterMonitorTest.java hangs
    • S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java hangs
    • S8071668: [macosx] Clipboard does not work with 3rd parties Clipboard Managers
    • S8072385, PR2387: Only the first DNSName entry is checked for endpoint identification
    • S8073357: schema1.xsd has wrong content. Sequence of the enum values has been changed
    • S8073385: Bad error message on parsing illegal character in XML attribute
    • S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on Solaris Sparc
    • S8074297: substring in XSLT returns wrong character if string contains supplementary chars
    • S8074761, PR2470: Empty optional parameters of LDAP query are not interpreted as empty
    • S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java failed in certain env.
    • S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java failed in certain env.
    • S8075667: (tz) Support tzdata2015b
    • S8076290: JCK test api/xsl/conf/string/string17 starts failing after JDK-8074297
    • S8077685: (tz) Support tzdata2015d
    • S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
    • S8078439: SPNEGO auth fails if client proposes MS krb5 OID
    • S8078562: Add modified dates
    • S8078654, PR2333: CloseTTFontFileFunc callback should be removed
    • S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts with “widen increases”
    • S8080318: jdk8u51 l10n resource file translation update
    • S8081315, PR2405: Avoid giflib interlacing workaround with giflib 5.0.0 on
    • S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh test has RC4 dependencies
    • S8081475, PR2494: SystemTap does not work when JDK is compiled with GCC 5
    • S8081775: two lib/testlibrary tests are failing with “Error. failed to clean up files after test” with jtreg 4.1 b12
    • S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError on Zero JVM initialization on non x86 platforms.
    • S8133970: Only apply PaX-marking when needed by a running PaX kernel
    • S8133990: Revert introduction of lambda expression in sun.lwawt.macosx.LWCToolkit
    • S8133991: Fix mistake in 8075374 backport
  • Bug fixes
    • PR2328: GCJ uses ppc64el named libarch directory on ppc64le
    • PR2341: Update README & INSTALL files
    • PR2367: 7 no longer builds with 6 – Util is not public in sun.management
    • PR2390: Make elliptic curve removal optional
    • PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
    • PR2458: Policy JAR files should be timestamped with the date of the policy file they hold
    • PR2482, RH489586, RH1236619: OpenJDK can’t handle spaces in zone names in /etc/sysconfig/clock
    • PR2499: Update remove-intree-libraries.sh script
    • PR2502: Remove -fno-tree-vectorize workaround now http://gcc.gnu.org/PR63341 is fixed
    • PR2507, G541462: Only apply PaX markings by default on running PaX kernels
  • CACAO
    • PR2380: Raise javadoc and JAVAC_FLAGS memory limits for CACAO
  • JamVM
    • PR2500: Add executable stack markings to callNative.S on JamVM
  • AArch64 port
    • Changes to make aix compile after the merge
    • S8025613, PR2437: clang: remove -Wno-unused-value
    • S8035938: Memory leak in JvmtiEnv::GetConstantPool
    • S8058113: Execution of OnOutOfMemoryError command hangs on linux-sparc
    • S8068674: Increment minor version of HSx for 7u85 and initialize the build number
    • S8069593: Changes to JavaThread::_thread_state must use acquire and release
    • S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
    • S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
    • S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
    • S8074349: AARCH64: C2 generates poor code for some byte and character stores
    • S8075045: AARCH64: Stack banging should use store rather than load
    • S8075136: Unnecessary sign extension for byte array access
    • S8075324: Costs of memory operands in aarch64.ad are inconsistent
    • S8075443: AARCH64: Missed L2I optimizations in C2
    • S8075930: AARCH64: Use FP Register in C2
    • S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be inlined.
    • S8076467: AARCH64: assertion fail with -XX:+UseG1GC
    • S8078529: Increment the build value to b02 for hs24.85 in 8u85
    • S8079203: AARCH64: Need to cater for different partner implementations
    • S8080586: aarch64: hotspot test compiler/codegen/7184394/TestAESMain.java fails
    • S8081622: Increment the build value to b03 for hs24.85 in 8u51
  • PPC & AIX port
    • S8069590: AIX port of “8050807: Better performing performance data handling”
    • S8078482, PR2307: ppc: pass thread to throw_AbstractMethodError
    • S8080190: PPC64: Fix wrong rotate instructions in the .ad file

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • 055fccbb0e5f25382c89d1bd71d50a5a34ffae32859375bb3dcc048a98ef4726 icedtea-2.5.6.tar.gz
  • e4caa7def2561918e79e5778ec9f793ed0a28fc4cafd10675fa1ed7d7133f032 icedtea-2.5.6.tar.gz.sig
  • 2f0bab310ad177669a0724aa1b0fc32094ff435e8afd930f9d132e505ab99543 icedtea-2.5.6.tar.gz.sig.ec
  • bb3c7e9fd372c737849d9d3129d935174492a0d924a2801223c822426338b8c4 icedtea-2.5.6.tar.xz
  • e5b4f9c7890051c3e209c3dd606e8da0d74e215c05d08369cf19cbdd6e57a4d5 icedtea-2.5.6.tar.xz.sig
  • ac4ed71aed0ade86a3253aae8f52f9e1e651237e5a1ae4dddfe216c58495be51 icedtea-2.5.6.tar.xz.sig.ec

The checksums can be downloaded from:

A 2.5.6 ebuild for Gentoo is available.

The following people helped with these releases:

  • James Le Cuirot (PR2380 CACAO work)
  • Tiago Sturmer Diatx (PR2328 ppc64le work)
  • Andrew Dinn (AArch64 integration work)
  • Andrew Hughes (all other backports & bug fixes, release management)
  • Omair Majid (OJ05)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.5.6.tar.gz

or:

$ tar x -I xz -f icedtea-2.5.6.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.5.6/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.6.x series with the July 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

Please Note: The backport of jdk.tls.ephemeralDHKeySize now defaults to 1024-bit keys (CVE-2015-4000). To use the previous default (768-bit keys), pass -Djdk.tls.ephemeralDHKeySize=legacy on the command-line. Both OpenJDK 7 & 8 allow the use of “matched” mode which creates an ephemeral DH key matching the size of the authentication key, or the specification of a key size between 1024 and 2048 bits inclusive.

What’s New?

New in release 2.6.1 (2015-07-21)

  • Security fixes
  • OpenJDK
    • S7124253: [macosx] Flavor change notification not coming
    • S8007219: [macosx] Frame size reverts meaning of maximized attribute if frame size close to display
    • S8013581: [macosx] Key Bindings break with awt GraphicsEnvironment setFullScreenWindow
    • S8014464: Update jcheck for OpenJDK 7
    • S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
    • S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
    • S8027561: [macosx] Cleanup “may not respond to selector” warnings in native code
    • S8029868: Fix KSS issues in sun.lwawt.macosx
    • S8042205: javax/management/monitor/*: some tests didn’t get all the notifications
    • S8043201: Deprecate RC4 in SunJSSE provider
    • S8046817: JDK 8 schemagen tool does not generate xsd files for enum types
    • S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
    • S8064546: CipherInputStream throws BadPaddingException if stream is not fully read
    • S8065764: javax/management/monitor/CounterMonitorTest.java hangs
    • S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java hangs
    • S8068674: Increment minor version of HSx for 7u85 and initialize the build number
    • S8071668: [macosx] Clipboard does not work with 3rd parties Clipboard Managers
    • S8073357: schema1.xsd has wrong content. Sequence of the enum values has been changed
    • S8073385: Bad error message on parsing illegal character in XML attribute
    • S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on Solaris Sparc
    • S8074297: substring in XSLT returns wrong character if string contains supplementary chars
    • S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java failed in certain env.
    • S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java failed in certain env.
    • S8075667: (tz) Support tzdata2015b
    • S8076290: JCK test api/xsl/conf/string/string17 starts failing after JDK-8074297
    • S8077685: (tz) Support tzdata2015d
    • S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
    • S8078439: SPNEGO auth fails if client proposes MS krb5 OID
    • S8078529: Increment the build value to b02 for hs24.85 in 7u85
    • S8078562: Add modified dates
    • S8080318: jdk8u51 l10n resource file translation update
    • S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh test has RC4 dependencies
    • S8081622: Increment the build value to b03 for hs24.85 in 7u85
    • S8081775: two lib/testlibrary tests are failing with “Error. failed to clean up files after test” with jtreg 4.1 b12
    • S8133966: Allow OpenJDK to build on PaX-enabled kernels
    • S8133967: Fix build where PAX_COMMAND is not specified
    • S8133970: Only apply PaX-marking when needed by a running PaX kernel
    • S8133990: Revert introduction of lambda expression in sun.lwawt.macosx.LWCToolkit
    • S8133991: Fix mistake in 8075374 backport
  • Backports
    • S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError on Zero JVM initialization on non x86 platforms.
  • Bug fixes
    • PR2501: libjavasctp.so doesn’t need to link against libdl when linking against libsctp
    • PR2502: Remove -fno-tree-vectorize workaround now http://gcc.gnu.org/PR63341 is fixed
    • PR2503: Add existence check for all optional dependencies in jdk_generic_profile.sh
    • PR2521: Systems with a GLib without libgio segfault when obtaining proxy information

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • 491866e57199b0bc99d716be3eabaab97d9f6a698d1a652d748baeddeedfe963 icedtea-2.6.1.tar.gz
  • 8c16de4a0cd2301fb63aebe393d2c715a077f992ee1f97a5bf626d4b69162b22 icedtea-2.6.1.tar.gz.sig
  • fd5813b6b3fb0f2f973bfe247daa460a64bae1483330ebfe162e62d2d80712e3 icedtea-2.6.1.tar.gz.sig.ec
  • cce4fac1e729690e986ef6f6d1c47b507f622a61da33d57d2b0a8c12e23e2068 icedtea-2.6.1.tar.xz
  • dd894de3b06f90ef5e12618ccc971811388b440ff0d00151fdabe3c35b64e7f4 icedtea-2.6.1.tar.xz.sig
  • 144af57a421f941c50d01c3a6a527e9bc90f78fc621bd1c5af5b73272e7fe851 icedtea-2.6.1.tar.xz.sig.ec

The checksums can be downloaded from:

A 2.6.1 ebuild for Gentoo is available.

The following people helped with these releases:

  • Andrew Hughes (all other backports & bug fixes, release management)
  • Omair Majid (OJ05)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.6.1.tar.gz

or:

$ tar x -I xz -f icedtea-2.6.1.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.6.1/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

We are pleased to announce the release of IcedTea 2.6.0.

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support with the first release of the 2.6.x series, based on OpenJDK u80.

There will be one further release of the 2.5.x series, 2.5.6, for the July 2015 security updates, in tandem with 2.6.1, both coming in the next few days. In October, the 2.5.x branch will be rendered obsolete, with only the 2.6.x series being updated for that security update. Please use the intervening period to transition to the 2.6.x series.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Note: this version integrates the AArch64 port into the main tree and uses the same HotSpot tree as has been shipping as the AArch64/ARM32 version in the 2.5.x series. Thus, there is no longer a need for a separate HotSpot tarball on AArch64 and ARM32.

Full details of the release can be found below.

What’s New?

New in release 2.6.0 (2015-07-17)

  • OpenJDK
    • S4792059: test/java/io/pathNames/GeneralSolaris.java fails on symbolic links
    • S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid value
    • S5036554: unmarshal error on CORBA alias type in CORBA any
    • S6458027: Disabling IPv6 on a specific network interface causes problems
    • S6642881: Improve performance of Class.getClassLoader()
    • S6695379: Copy method annotations and parameter annotations to synthetic bridge methods
    • S6883953: java -client -XX:ValueMapInitialSize=0 crashes
    • S6931564: Incorrect display name of Locale for south africa
    • S6976528: PS: assert(!limit_exceeded || softrefs_clear) failed: Should have been cleared
    • S6984762: Invalid close of file descriptor ‘-1′ in findZoneinfoFile
    • S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java test indicates “.a frame wasn’t focused on click” jdk7 issue on linux
    • S7010989: Duplicate closure of file descriptors leads to unexpected and incorrect closure of sockets
    • S7017962: Obsolete link is used in URL class level spec
    • S7033533: realSync() doesn’t work with Xfce
    • S7036518: TEST_BUG: add cygwin support to test/java/nio/charset/coders/CheckSJISMappingProp.sh
    • S7052170: javadoc -charset option generates wrong meta tag
    • S7145454: JVM wide monitor lock in Currency.getInstance(String)
    • S7152892: some jtreg tests fail with permission denied
    • S7153157: ClassValue.get does not return if computeValue calls remove
    • S7156459: Remove unnecessary get() from Currency.getInstance()
    • S7158636: InterfaceAddress.getBroadcast() returns invalid broadcast address on WLAN
    • S7160604: Using non-opaque windows – popups are initially not painted correctly
    • S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails (Invalid key code)
    • S7164841: Improvements to the GC log file rotation
    • S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh failing
    • S7172865: PropertyDescriptor fails to work with setter method name if setter is non-void
    • S7178362: Socket impls should ignore unsupported proxy types rather than throwing
    • S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
    • S7180557: InetAddress.getLocalHost throws UnknownHostException on java7u5 on OSX
    • S7196009: SunPkcs11 provider fails to parse config path containing parenthesis
    • S7199674: (props) user.home property does not return an accessible location in sandboxed environment [macosx]
    • S8001633: Wrong alt processing during switching between windows.
    • S8002148: [TEST_BUG] The four lines printed are not the bold typeface.
    • S8004488: wrong permissions checked in krb5
    • S8006023: Embedded Builds fail management test because of requirement for UsePerfData being enabled.
    • S8008328: [partfait] Null pointer defererence in hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
    • S8008386: (cs) Unmappable leading should be decoded to replacement.
    • S8008759: Do not let internal JDK zlib symbols leak out of fastdebug libzip.so
    • S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails intermittently
    • S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes UnknownHostException to be thrown
    • S8010738: G1: Output for full GCs with +PrintGCDetails should contain perm gen/meta data size change info
    • S8011795: DOM Serializer prints stack traces to System.err
    • S8012625: Incorrect handling of HTTP/1.1 ” Expect: 100-continue ” in HttpURLConnection
    • S8012941: JSR 292: too deep inlining might crash compiler because of stack overflow
    • S8013098: [macosx] localized aqua_xx.properties are not included in rt.jar
    • S8013485: javac can’t handle annotations with a <clinit> from a previous compilation unit
    • S8013849: Awt assert on Hashtable.cpp:124
    • S8014254: Selector in HttpServer introduces a 1000 ms delay when using KeepAlive
    • S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java fails on MacOSX
    • S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
    • S8015780: java/lang/reflect/Method/GenericStringTest.java failing
    • S8016579: (process) IOException thrown by ProcessBuilder.start() method is incorrectly encoded
    • S8017212: File.createTempFile requires unnecessary “read” permission
    • S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
    • S8019834: InetAddress.getByName hangs for bad IPv6 literals
    • S8020675: invalid jar file in the bootclasspath could lead to jvm fatal error
    • S8020829: NMT tests fail on platforms if NMT detail is not supported
    • S8022229: Intermittent test failures in sun/tools/jstatd
    • S8022531: [TEST_BUG] After double-click on the folder names , there is no ‘OK’ button in the dialog.
    • S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR and GET_OWNED_MONITOR
    • S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java fails on Windows
    • S8024677: [TESTBUG] Move tests for classes in /testlibrary
    • S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
    • S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java fails with TestData): failure java.lang.AssertionError: expected [true] but found [false]
    • S8025710: Proxied HTTPS connections reused by HttpClient can send CONNECT to the server
    • S8025917: JDK demo applets not running with >=7u40 or (JDK 8 and JDK 9)
    • S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
    • S8026303: CMS: JVM intermittently crashes with “FreeList of size 258 violates Conservation Principle” assert
    • S8027026: Change keytool -genkeypair to use -keyalg RSA
    • S8027348: (process) Enhancement of handling async close of ProcessInputStream
    • S8027695: There should be a space before % sign in Swedish locale
    • S8027961: Inet[4|6]Address native initializing code should check field/MethodID values
    • S8028073: race condition in ObjectMonitor implementation causing deadlocks
    • S8028074: InetAddress.getByName fails with UHE “invalid IPv6 address” if host name starts with a-f
    • S8028159: C2: compiler stack overflow during inlining of @ForceInline methods
    • S8028280: ParkEvent leak when running modified runThese which only loads classes
    • S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
    • S8029073: (corba) New connection reclaimed when number of connection is greater than highwatermark
    • S8029190: VM_Version::determine_features() asserts on Fujitsu Sparc64 CPUs
    • S8029302: Performance regression in Math.pow intrinsic
    • S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be set in IPv6 header
    • S8029775: Solaris code cleanup
    • S8030114: [parfait] warnings from b119 for jdk.src.share.native.sun.security.smartcardio: JNI exception pending
    • S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java failed with NPE
    • S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java fails if java output contains VM warning
    • S8030878: JConsole issues meaningless message if SSL connection fails
    • S8030976: Untaken paths should be more vigorously pruned at highest optimization level
    • S8031061: new hotspot build – hs24.60-b07
    • S8031068: java/util/logging/ParentLoggersTest.java: checkLoggers: getLoggerNames() returned unexpected loggers
    • S8031435: Ftp download does not work properly for ftp user without password
    • S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java fails on Solaris zones virtual hosts
    • S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
    • S8031572: jarsigner -verify exits with 0 when a jar file is not properly signed
    • S8031743: C2: loadI2L_immI broken for negative memory values
    • S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32 because it Cant attach to the core file
    • S8031765: Child process error stream is not empty!
    • S8032466: serviceability/sa/jmap-hashcode/Test8028623.java fails with compilation errors
    • S8032573: CertificateFactory.getInstance(“X.509″).generateCertificates(InputStream) does not throw CertificateException for invalid input
    • S8032808: Support Solaris SO_FLOW_SLA socket option
    • S8032832: Applet/browser deadlocks, when IIS integrated authentication is used
    • S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting JDev With Voiceover Running
    • S8032901: WaitForMultipleObjects() return value not handled appropriately
    • S8032908: getTextContent doesn’t return string in JAXP
    • S8033524: Set minor version for hotspot in 7u80 to 80 and build number to b01
    • S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c: JNI exception pending
    • S8033627: UTC+02:00 time zones are not detected correctly on Windows
    • S8033699: Incorrect radio button behavior
    • S8033970: new hotspot build – hs24.80-b02
    • S8034118: [parfait] JNI exception pending in macosx/native/sun/awt/JavaComponentAccessibility.m
    • S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
    • S8034768: [parfait] JNI exception pending in jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
    • S8034920: new hotspot build – hs24.80-b03
    • S8035435: new hotspot build – hs24.80-b04
    • S8035973: NPE in ForwardBuilder
    • S8035938: Memory leak in JvmtiEnv::GetConstantPool
    • S8036778: new hotspot build – hs24.80-b05
    • S8036823: Stack trace sometimes shows ‘locked’ instead of ‘waiting to lock’
    • S8036981: JAXB not preserving formatting for xsd:any Mixed content
    • S8037502: build.tools.javazic.Zoneinfo incorrectly calculates raw GMT offset change time
    • S8037945: Paths.get(“”).normalize() throws ArrayIndexOutOfBoundsException
    • S8038274: update 8u fix for 8028073 now that 8028280 is backported to 8u
    • S8038440: backport few C2 fixes
    • S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be manageable through the API
    • S8038640: new hotspot build – hs24.80-b06
    • S8038785: hot workaround fix for a crash in C2 compiler at Node::rematerialize
    • S8038919: Requesting focus to a modeless dialog doesn’t work on Safari
    • S8038961: kinit, klist and ktab aren’t built from jdk7u51 in licensee src bundles
    • S8038966: JAX-WS handles wrongly xsd:any arguments for Web services
    • S8039042: G1: Phantom zeros in cardtable
    • S8039118: Windows build failure (j2pcsc.dll : fatal error unresolved external symbol throwByName)
    • S8039292: new hotspot build – hs24.80-b07
    • S8039368: Remove testcase from npt utf.c
    • S8039891: Remove ppcsflt builds from JPRT
    • S8039899: Missing licence headers in test for JDK-8033113
    • S8040076: Memory leak: java.awt.List objects allowing multiple selections are not GC-ed.
    • S8040664: Revert temporary fix JDK-8038785
    • S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 – assert(! had_error) failed: bad dominance
    • S8041507: Java Access Bridge version strings need to be fixed
    • S8041725: Nimbus JList selection colors persist across L&F changes
    • S8041791: String.toLowerCase regression – violates Unicode standard
    • S8041918: BootstrapMethods attribute cannot be empty.
    • S8041931: test/sun/net/www/http/HttpClient/B8025710.java fails with cannot find keystore
    • S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java failing on all platforms
    • S8041984: CompilerThread seems to occupy all CPU in a very rare situation
    • S8042052: assert(t != NULL) failed: must set before get
    • S8042235: redefining method used by multiple MethodHandles crashes VM
    • S8042247: Make 7u60 the default jprt release for hs24.80
    • S8042250: Misleading command line output for ReservedCodeCacheSize validation
    • S8042465: Applet menus not rendering when browser is full screen on Mac
    • S8042835: Remove mnemonic character from open, save and open directory JFileChooser’s buttons
    • S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
    • S8043129: JAF initialisation in SAAJ clashing with the one in javax.mail
    • S8043354: OptimizePtrCompare too aggressive when allocations are present
    • S8043413: REGRESSION: Hotspot causes segmentation fault in jdk8ux, but not in jdk7ux
    • S8043720: (smartcardio) Native memory should be handled more accurately
    • S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
    • S8044614: [macosx] Focus issue with 2 applets in firefox
    • S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped files (zlib 1.2.8 port)
    • S8046007: Java app receives javax.print.PrintException: Printer is not accepting job
    • S8046024: JDI shared memory transport failed with “Observed abandoned IP mutex”
    • S8046233: VerifyError on backward branch
    • S8046269: Build broken : THIS_FILE : undeclared identifier
    • S8046275: Fastdebug build failing on jdk9/hs/ control jobs after pulling some hs-comp changes
    • S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java failed error_cnt=12
    • S8046289: compiler/6340864/TestLongVect.java timeout with
    • S8046495: KeyEvent can not be accepted in quick mouse clicking
    • S8046516: Segmentation fault in JVM (easily reproducible)
    • S8046559: NPE when changing Windows theme
    • S8046588: test for SO_FLOW_SLA availability does not check for EACCESS
    • S8047186: jdk.net.Sockets throws InvocationTargetException instead of original runtime exceptions
    • S8047187: Test jdk/net/Sockets/Test.java fails to compile after fix JDK-8046588
    • S8047340: (process) Runtime.exec() fails in Turkish locale
    • S8048050: Agent NullPointerException when rmi.port in use
    • S8048110: Using tables in JTextPane leads to infinite loop in FlowLayout.layoutRow
    • S8048170: Test closed/java/text/Normalizer/ConformanceTest.java failed
    • S8048212, PR2418: Two tests failed with “java.net.SocketException: Bad protocol option” on Windows after 8029607
    • S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
    • S8048506: [macosx] javax.swing.PopupFactory issue with null owner
    • S8048887: SortingFocusTraversalPolicy throws IllegalArgumentException from the sort method
    • S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a validator through SchemaFactory
    • S8049684: pstack crashes on java core dump
    • S8050022: linux-sparcv9: assert(SharedSkipVerify || obj->is_oop()) failed: sanity check
    • S8050386: javac, follow-up of fix for JDK-8049305
    • S8050983: Misplaced parentheses in sun.net.www.http.HttpClient break HTTP PUT streaming
    • S8051004: javac, incorrect bug id in tests for JDK-8050386
    • S8051844: BootstrapMethods attribute cannot be empty again
    • S8051857: OperationTimedOut exception inside from XToolkit.syncNativeQueue call
    • S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java fails to compile
    • S8052406: SSLv2Hello protocol may be filter out unexpectedly
    • S8054019: Keytool Error publicKey’s is not X.509, but X509
    • S8054478: C2: Incorrectly compiled char[] array access crashes JVM
    • S8054530: C2: assert(res == old_res) failed: Inconsistency between old and new
    • S8054817: File ccache only recognizes Linux and Solaris defaults
    • S8054841: (process) ProcessBuilder leaks native memory
    • S8054883: Segmentation error while running program
    • S8055045: StringIndexOutOfBoundsException while reading krb5.conf
    • S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
    • S8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException
    • S8055949: ByteArrayOutputStream capacity should be maximal array size permitted by VM
    • S8056026: Debug security logging should print Provider used for each crypto operation
    • S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java fails in Windows
    • S8056309: Set minor version for hotspot in 7u76 to 76 and build number to b01
    • S8056914: Right Click Menu for Paste not showing after upgrading to java 7
    • S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java fails with compilation error
    • S8057530: (process) Runtime.exec throws garbled message in jp locale
    • S8057564: JVM hangs at getAgentProperties after attaching to VM with lower
    • S8057813: Alterations to jdk_security3 test target
    • S8058113: Execution of OnOutOfMemoryError command hangs on linux-sparc
    • S8058120: Rendering / caret errors with HTMLDocument
    • S8058473: “Comparison method violates its general contract” when using Clipboard
    • S8058583: Remove CompilationRepeat
    • S8058608: JVM crash during Kerberos logins using des3-cbc-md5 on OSX
    • S8058927: ATG throws ClassNotFoundException
    • S8058932: java/net/InetAddress/IPv4Formats.java failed because hello.foo.bar does exist
    • S8058935: CPU detection gives 0 cores per cpu, 2 threads per core in Amazon EC2 environment
    • S8058936: hotspot/test/Makefile should use jtreg script from $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
    • S8059216: Make PrintGCApplicationStoppedTime print information about stopping threads
    • S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
    • S8059327: XML parser returns corrupt attribute value
    • S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass should create intermediate directories
    • S8060006: No Russian time zones mapping for Windows
    • S8060169: Update the Crash Reporting URL in the Java crash log
    • S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
    • S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
    • S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
    • S8061954: 7u76 – deployment warning dialogs do not work on Linux
    • S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront after JDK-8060146
    • S8062170: java.security.ProviderException: Error parsing configuration with space
    • S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java fails in 7u-cpu nightly
    • S8062608: BCEL corrupts debug data of methods that use generics
    • S8062672: JVM crashes during GC on various asserts which checks that HeapWord ptr is an oop
    • S8062744: jdk.net.Sockets.setOption/getOption does not support IP_TOS
    • S8062771: Core reflection should use final fields whenever possible
    • S8062923: XSL: Run-time internal error in ‘substring()’
    • S8062924: XSL: wrong answer from substring() function
    • S8064391: More thread safety problems in core reflection
    • S8064407: (fc) FileChannel transferTo should use TransmitFile on Windows
    • S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
    • S8064516: BCEL still corrupts generic methods if bytecode offsets are modified
    • S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
    • S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
    • S8064846: Lazy-init thread safety problems in core reflection
    • S8065098: JColorChooser no longer supports drag and drop between two JVM instances
    • S8065238, PR2478: javax.naming.NamingException after upgrade to JDK 8
    • S8065552: setAccessible(true) on fields of Class may throw a SecurityException
    • S8065553: Failed Java web start via IPv6 (Java7u71 or later)
    • S8065609: 7u76 l10n resource file translation update
    • S8065618: C2 RA incorrectly removes kill projections
    • S8065674: javac generates incorrect LVT table for trivial cases
    • S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
    • S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates instead of using keep-alive
    • S8066045: opto/node.hpp:355, assert(i < _max) failed: oob: i=1, _max=1
    • S8066103: C2′s range check smearing allows out of bound array accesses
    • S8066612: Add a test that will call getDeclaredFields() on all classes and try to set them accessible.
    • S8066649: 8u backport for 8065618 is incorrect
    • S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
    • S8066775: opto/node.hpp:355, assert(i < _max) failed: oob: i=1, _max=1
    • S8068338: Better message about incompatible zlib in Deflater.init
    • S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer system property to jdk.nio.enableFastFileTransfer
    • S8068625: Remove extra year check for GenerateCurrencyData fix
    • S8068639: Make certain annotation classfile warnings opt-in
    • S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
    • S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
    • S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
    • S8072040: jdk7u80 l10n resource file translation update
    • S8072458: jdk/test/Makefile references (to be removed) win32 directory in jtreg
    • S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
    • S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
    • S8075092: Remove erroneous println statement from DoubleByteDecoder
  • Backports
  • Bug fixes
    • PR94: empty install target in Makefile.am
    • PR1374: Provide option to strip and link debugging info after build
    • PR1661: Cleanup SYSTEM_GCONF option and allow it to be set false
    • PR1786: Allow x86 build to occur on x86_64 using a previously built x86_64 build
    • PR1816: Split download/extraction rules for OpenJDK so they can run in parallel
    • PR1846: Build fails when using IcedTea7 as bootstrap JDK with native ecj
    • PR1847: Synchronise javac.in with IcedTea6
    • PR1883: Search Debian multiarch paths when looking for pcsclite
    • PR1888: Allow tarball checksumming to be disabled
    • PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
    • PR2144: make dist fails due to lack of HotSpot-specific patches
    • PR2161: RHEL 6 has a version of GIO which meets the version criteria, but has no g_settings_*
    • PR2233, RH1190835: Discover gsettings symbols separately so early versions of GLib can be used (e.g. on RHEL 6)
    • PR2236, RH1191652: ppc64le should report its os.arch as ppc64le so tools can detect it
    • PR2320: Allow use of system GConf
    • PR2323: System GConf without system GIO configuration broken
    • PR2328: GCJ uses ppc64el named libarch directory on ppc64le
    • PR2341: Update README & INSTALL files
    • PR2359: Ensure all stamp targets have aliases
    • PR2390: Make elliptic curve removal optional
    • PR2394: ppc64le does not support -Xshare:dump
    • PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
    • PR2446: Support system libsctp
    • PR2458: Policy JAR files should be timestamped with the date of the policy file they hold
    • PR2482, RH489586, RH1236619: OpenJDK can’t handle spaces in zone names in /etc/sysconfig/clock
    • PR2496: Enable system PCSC support by default
    • PR2499: Update remove-intree-libraries.sh script
    • PR2507, G541462: Only apply PaX markings by default on running PaX kernels
    • PR2530: PaX mark the installed JDK so it runs on hardened systems
    • PR2531: Location of docs directory in install-data-local is incorrect
    • PR2532: install stage fails where BUILD_ARCH_DIR != INSTALL_ARCH_DIR
    • PR2533: Allow greater control of Javadoc installation directory
    • PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec file does
    • PR2535: install-data-local needs to check that classes.jsa actually exists
    • PR2537: Desktop files do not allow installation from multiple versions of IcedTea
    • PR2539: Libraries in some subdirectories of jre/lib/{arch} are not installed
    • PR2540: Specify a cacerts file for the OpenJDK build as we do for OpenJDK 8
    • PR2545: Extend tarball checksumming option to allow the checksum to be specified
    • PR2548: install stage doesn’t install symbolic links
    • PR2550: Desktop file doesn’t reference versioned icon
  • CACAO
    • PR2380: Raise javadoc and JAVAC_FLAGS memory limits for CACAO
    • PR2519: Update to latest CACAO
    • PR2520: –enable-cacao builds broken, missing JVM_GetTemporaryDirectory impl.
  • JamVM
    • PR2172: –enable-jamvm builds broken, missing JVM_GetTemporaryDirectory impl
    • PR2500: Add executable stack markings to callNative.S on JamVM
  • AArch64 port
    • Add copyright to aarch64_ad.m4
    • S8069593: Changes to JavaThread::_thread_state must use acquire and release
    • S8074349: AARCH64: C2 generates poor code for some byte and character stores
    • S8075045: AARCH64: Stack banging should use store rather than load
    • S8075324: Costs of memory operands in aarch64.ad are inconsistent
    • S8075443: AARCH64: Missed L2I optimizations in C2
    • S8075930: AARCH64: Use FP Register in C2
    • S8076467: AARCH64: assertion fail with -XX:+UseG1GC
    • S8079203: AARCH64: Need to cater for different partner implementations
    • S8080586: aarch64: hotspot test compiler/codegen/7184394/TestAESMain.java fails
  • PPC & AIX port
    • Changes to make aix compile after the merge
    • S8069590: AIX port of “8050807: Better performing performance data handling”
    • S8078482, PR2307, RH1201393: ppc: pass thread to throw_AbstractMethodError
    • S8080190: PPC64: Fix wrong rotate instructions in the .ad file

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • b45c829dc937360ed7fbd19505be42007a3abfa8df4afeb77cd9ef70abcdc7a9 icedtea-2.6.0.tar.gz
  • 91c024c6f87cffd7759a79533fa3c7714976f4144d49a142ea27005ee5297874 icedtea-2.6.0.tar.gz.sig
  • ee433e52c29bd66c7714137c71efc47b38aaca7d6e5bb9b5a5a7f00de1e2b103 icedtea-2.6.0.tar.gz.sig.ec
  • 873e92d212530bf573b97976e115f262fef49a6f1ee708d4e5b955643ee970c5 icedtea-2.6.0.tar.xz
  • 058322ffee20ceacf286b634fb1f54f1fde91951f2817e23d4c9071770a32d94 icedtea-2.6.0.tar.xz.sig
  • ae87c622f650a291c83b110cb8bd09b8ba3b61f257a0d248cefb23eae271a40e icedtea-2.6.0.tar.xz.sig.ec

The checksums can be downloaded from:

A 2.6.0 ebuild for Gentoo is available.

The following people helped with these releases:

  • James Le Cuirot (PR2380 CACAO work)
  • Tiago Sturmer Diatx (ppc64le work)
  • Andrew Dinn (AArch64 integration work)
  • Andrew Hughes (all other backports & bug fixes, release management)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.6.0.tar.gz

or:

$ tar x -I xz -f icedtea-2.6.0.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.6.0/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!