IcedTea


The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.5.x series with the July 2015 security fixes. This is the last release in the 2.5.x series.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

Please Note: The backport of jdk.tls.ephemeralDHKeySize now defaults to 1024-bit keys (CVE-2015-4000). To use the previous default (768-bit keys), pass -Djdk.tls.ephemeralDHKeySize=legacy on the command-line. Both OpenJDK 7 & 8 allow the use of “matched” mode which creates an ephemeral DH key matching the size of the authentication key, or the specification of a key size between 1024 and 2048 bits inclusive.

What’s New?

New in release 2.5.6 (2015-07-22)

  • Security fixes
  • Backports
    • S4890063, PR2305, RH1214835: HPROF: default text truncated when using doe=n option
    • S6991580, PR2308: IPv6 Nameservers in resolv.conf throws NumberFormatException
    • S7124253: [macosx] Flavor change notification not coming
    • S8007219: [macosx] Frame size reverts meaning of maximized attribute if frame size close to display
    • S8013581: [macosx] Key Bindings break with awt GraphicsEnvironment setFullScreenWindow
    • S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
    • S8021120, PR2301: TieredCompilation can be enabled even if TIERED is undefined
    • S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
    • S8027561: [macosx] Cleanup “may not respond to selector” warnings in native code
    • S8029607, PR2418: Type of Service (TOS) cannot be set in IPv6 header
    • S8029868: Fix KSS issues in sun.lwawt.macosx
    • S8039921, PR2421: SHA1WithDSA with key > 1024 bits not working
    • S8042205: javax/management/monitor/*: some tests didn’t get all the notifications
    • S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
    • S8043201: Deprecate RC4 in SunJSSE provider
    • S8043129, PR2338: JAF initialisation in SAAJ clashing with the one in javax.mail
    • S8046817: JDK 8 schemagen tool does not generate xsd files for enum types
    • S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
    • S8048212, PR2418: Two tests failed with “java.net.SocketException: Bad protocol option” on Windows after 8029607
    • S8048214, PR2357: Linker error when compiling G1SATBCardTableModRefBS after include order changes
    • S8062923: XSL: Run-time internal error in ‘substring()’
    • S8062924: XSL: wrong answer from substring() function
    • S8064546: CipherInputStream throws BadPaddingException if stream is not fully read
    • S8065238, PR2478: javax.naming.NamingException after upgrade to JDK 8
    • S8065764: javax/management/monitor/CounterMonitorTest.java hangs
    • S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java hangs
    • S8071668: [macosx] Clipboard does not work with 3rd parties Clipboard Managers
    • S8072385, PR2387: Only the first DNSName entry is checked for endpoint identification
    • S8073357: schema1.xsd has wrong content. Sequence of the enum values has been changed
    • S8073385: Bad error message on parsing illegal character in XML attribute
    • S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on Solaris Sparc
    • S8074297: substring in XSLT returns wrong character if string contains supplementary chars
    • S8074761, PR2470: Empty optional parameters of LDAP query are not interpreted as empty
    • S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java failed in certain env.
    • S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java failed in certain env.
    • S8075667: (tz) Support tzdata2015b
    • S8076290: JCK test api/xsl/conf/string/string17 starts failing after JDK-8074297
    • S8077685: (tz) Support tzdata2015d
    • S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
    • S8078439: SPNEGO auth fails if client proposes MS krb5 OID
    • S8078562: Add modified dates
    • S8078654, PR2333: CloseTTFontFileFunc callback should be removed
    • S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts with “widen increases”
    • S8080318: jdk8u51 l10n resource file translation update
    • S8081315, PR2405: Avoid giflib interlacing workaround with giflib 5.0.0 on
    • S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh test has RC4 dependencies
    • S8081475, PR2494: SystemTap does not work when JDK is compiled with GCC 5
    • S8081775: two lib/testlibrary tests are failing with “Error. failed to clean up files after test” with jtreg 4.1 b12
    • S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError on Zero JVM initialization on non x86 platforms.
    • OJ03: Only apply PaX-marking when needed by a running PaX kernel
    • OJ04: Revert introduction of lambda expression in sun.lwawt.macosx.LWCToolkit
    • OJ05: Fix mistake in 8075374 backport
  • Bug fixes
    • PR2328: GCJ uses ppc64el named libarch directory on ppc64le
    • PR2341: Update README & INSTALL files
    • PR2367: 7 no longer builds with 6 – Util is not public in sun.management
    • PR2390: Make elliptic curve removal optional
    • PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
    • PR2458: Policy JAR files should be timestamped with the date of the policy file they hold
    • PR2482, RH489586, RH1236619: OpenJDK can’t handle spaces in zone names in /etc/sysconfig/clock
    • PR2499: Update remove-intree-libraries.sh script
    • PR2502: Remove -fno-tree-vectorize workaround now http://gcc.gnu.org/PR63341 is fixed
    • PR2507, G541462: Only apply PaX markings by default on running PaX kernels
  • CACAO
    • PR2380: Raise javadoc and JAVAC_FLAGS memory limits for CACAO
  • JamVM
    • PR2500: Add executable stack markings to callNative.S on JamVM
  • AArch64 port
    • Changes to make aix compile after the merge
    • S8025613, PR2437: clang: remove -Wno-unused-value
    • S8035938: Memory leak in JvmtiEnv::GetConstantPool
    • S8058113: Execution of OnOutOfMemoryError command hangs on linux-sparc
    • S8068674: Increment minor version of HSx for 7u85 and initialize the build number
    • S8069593: Changes to JavaThread::_thread_state must use acquire and release
    • S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
    • S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
    • S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
    • S8074349: AARCH64: C2 generates poor code for some byte and character stores
    • S8075045: AARCH64: Stack banging should use store rather than load
    • S8075136: Unnecessary sign extension for byte array access
    • S8075324: Costs of memory operands in aarch64.ad are inconsistent
    • S8075443: AARCH64: Missed L2I optimizations in C2
    • S8075930: AARCH64: Use FP Register in C2
    • S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be inlined.
    • S8076467: AARCH64: assertion fail with -XX:+UseG1GC
    • S8078529: Increment the build value to b02 for hs24.85 in 8u85
    • S8079203: AARCH64: Need to cater for different partner implementations
    • S8080586: aarch64: hotspot test compiler/codegen/7184394/TestAESMain.java fails
    • S8081622: Increment the build value to b03 for hs24.85 in 8u51
  • PPC & AIX port
    • S8069590: AIX port of “8050807: Better performing performance data handling”
    • S8078482, PR2307: ppc: pass thread to throw_AbstractMethodError
    • S8080190: PPC64: Fix wrong rotate instructions in the .ad file

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • 055fccbb0e5f25382c89d1bd71d50a5a34ffae32859375bb3dcc048a98ef4726 icedtea-2.5.6.tar.gz
  • e4caa7def2561918e79e5778ec9f793ed0a28fc4cafd10675fa1ed7d7133f032 icedtea-2.5.6.tar.gz.sig
  • 2f0bab310ad177669a0724aa1b0fc32094ff435e8afd930f9d132e505ab99543 icedtea-2.5.6.tar.gz.sig.ec
  • bb3c7e9fd372c737849d9d3129d935174492a0d924a2801223c822426338b8c4 icedtea-2.5.6.tar.xz
  • e5b4f9c7890051c3e209c3dd606e8da0d74e215c05d08369cf19cbdd6e57a4d5 icedtea-2.5.6.tar.xz.sig
  • ac4ed71aed0ade86a3253aae8f52f9e1e651237e5a1ae4dddfe216c58495be51 icedtea-2.5.6.tar.xz.sig.ec

The checksums can be downloaded from:

A 2.5.6 ebuild for Gentoo is available.

The following people helped with these releases:

  • James Le Cuirot (PR2380 CACAO work)
  • Tiago Sturmer Diatx (PR2328 ppc64le work)
  • Andrew Dinn (AArch64 integration work)
  • Andrew Hughes (all other backports & bug fixes, release management)
  • Omair Majid (OJ05)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.5.6.tar.gz

or:

$ tar x -I xz -f icedtea-2.5.6.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.5.6/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.6.x series with the July 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

Please Note: The backport of jdk.tls.ephemeralDHKeySize now defaults to 1024-bit keys (CVE-2015-4000). To use the previous default (768-bit keys), pass -Djdk.tls.ephemeralDHKeySize=legacy on the command-line. Both OpenJDK 7 & 8 allow the use of “matched” mode which creates an ephemeral DH key matching the size of the authentication key, or the specification of a key size between 1024 and 2048 bits inclusive.

What’s New?

New in release 2.6.1 (2015-07-21)

  • Security fixes
  • OpenJDK
    • S7124253: [macosx] Flavor change notification not coming
    • S8007219: [macosx] Frame size reverts meaning of maximized attribute if frame size close to display
    • S8013581: [macosx] Key Bindings break with awt GraphicsEnvironment setFullScreenWindow
    • S8014464: Update jcheck for OpenJDK 7
    • S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
    • S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh Failed to initialize connector
    • S8027561: [macosx] Cleanup “may not respond to selector” warnings in native code
    • S8029868: Fix KSS issues in sun.lwawt.macosx
    • S8042205: javax/management/monitor/*: some tests didn’t get all the notifications
    • S8043201: Deprecate RC4 in SunJSSE provider
    • S8046817: JDK 8 schemagen tool does not generate xsd files for enum types
    • S8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
    • S8064546: CipherInputStream throws BadPaddingException if stream is not fully read
    • S8065764: javax/management/monitor/CounterMonitorTest.java hangs
    • S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java hangs
    • S8068674: Increment minor version of HSx for 7u85 and initialize the build number
    • S8071668: [macosx] Clipboard does not work with 3rd parties Clipboard Managers
    • S8073357: schema1.xsd has wrong content. Sequence of the enum values has been changed
    • S8073385: Bad error message on parsing illegal character in XML attribute
    • S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on Solaris Sparc
    • S8074297: substring in XSLT returns wrong character if string contains supplementary chars
    • S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java failed in certain env.
    • S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java failed in certain env.
    • S8075667: (tz) Support tzdata2015b
    • S8076290: JCK test api/xsl/conf/string/string17 starts failing after JDK-8074297
    • S8077685: (tz) Support tzdata2015d
    • S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
    • S8078439: SPNEGO auth fails if client proposes MS krb5 OID
    • S8078529: Increment the build value to b02 for hs24.85 in 7u85
    • S8078562: Add modified dates
    • S8080318: jdk8u51 l10n resource file translation update
    • S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh test has RC4 dependencies
    • S8081622: Increment the build value to b03 for hs24.85 in 7u85
    • S8081775: two lib/testlibrary tests are failing with “Error. failed to clean up files after test” with jtreg 4.1 b12
    • OJ01: Allow OpenJDK to build on PaX-enabled kernels
    • OJ02: Fix build where PAX_COMMAND is not specified
    • OJ03: Only apply PaX-marking when needed by a running PaX kernel
    • OJ04: Revert introduction of lambda expression in sun.lwawt.macosx.LWCToolkit
    • OJ05: Fix mistake in 8075374 backport
  • Backports
    • S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError on Zero JVM initialization on non x86 platforms.
  • Bug fixes
    • PR2501: libjavasctp.so doesn’t need to link against libdl when linking against libsctp
    • PR2502: Remove -fno-tree-vectorize workaround now http://gcc.gnu.org/PR63341 is fixed
    • PR2503: Add existence check for all optional dependencies in jdk_generic_profile.sh
    • PR2521: Systems with a GLib without libgio segfault when obtaining proxy information

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • 491866e57199b0bc99d716be3eabaab97d9f6a698d1a652d748baeddeedfe963 icedtea-2.6.1.tar.gz
  • 8c16de4a0cd2301fb63aebe393d2c715a077f992ee1f97a5bf626d4b69162b22 icedtea-2.6.1.tar.gz.sig
  • fd5813b6b3fb0f2f973bfe247daa460a64bae1483330ebfe162e62d2d80712e3 icedtea-2.6.1.tar.gz.sig.ec
  • cce4fac1e729690e986ef6f6d1c47b507f622a61da33d57d2b0a8c12e23e2068 icedtea-2.6.1.tar.xz
  • dd894de3b06f90ef5e12618ccc971811388b440ff0d00151fdabe3c35b64e7f4 icedtea-2.6.1.tar.xz.sig
  • 144af57a421f941c50d01c3a6a527e9bc90f78fc621bd1c5af5b73272e7fe851 icedtea-2.6.1.tar.xz.sig.ec

The checksums can be downloaded from:

A 2.6.1 ebuild for Gentoo is available.

The following people helped with these releases:

  • Andrew Hughes (all other backports & bug fixes, release management)
  • Omair Majid (OJ05)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.6.1.tar.gz

or:

$ tar x -I xz -f icedtea-2.6.1.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.6.1/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

We are pleased to announce the release of IcedTea 2.6.0.

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support with the first release of the 2.6.x series, based on OpenJDK u80.

There will be one further release of the 2.5.x series, 2.5.6, for the July 2015 security updates, in tandem with 2.6.1, both coming in the next few days. In October, the 2.5.x branch will be rendered obsolete, with only the 2.6.x series being updated for that security update. Please use the intervening period to transition to the 2.6.x series.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Note: this version integrates the AArch64 port into the main tree and uses the same HotSpot tree as has been shipping as the AArch64/ARM32 version in the 2.5.x series. Thus, there is no longer a need for a separate HotSpot tarball on AArch64 and ARM32.

Full details of the release can be found below.

What’s New?

New in release 2.6.0 (2015-07-17)

  • OpenJDK
    • S4792059: test/java/io/pathNames/GeneralSolaris.java fails on symbolic links
    • S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid value
    • S5036554: unmarshal error on CORBA alias type in CORBA any
    • S6458027: Disabling IPv6 on a specific network interface causes problems
    • S6642881: Improve performance of Class.getClassLoader()
    • S6695379: Copy method annotations and parameter annotations to synthetic bridge methods
    • S6883953: java -client -XX:ValueMapInitialSize=0 crashes
    • S6931564: Incorrect display name of Locale for south africa
    • S6976528: PS: assert(!limit_exceeded || softrefs_clear) failed: Should have been cleared
    • S6984762: Invalid close of file descriptor ‘-1′ in findZoneinfoFile
    • S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java test indicates “.a frame wasn’t focused on click” jdk7 issue on linux
    • S7010989: Duplicate closure of file descriptors leads to unexpected and incorrect closure of sockets
    • S7017962: Obsolete link is used in URL class level spec
    • S7033533: realSync() doesn’t work with Xfce
    • S7036518: TEST_BUG: add cygwin support to test/java/nio/charset/coders/CheckSJISMappingProp.sh
    • S7052170: javadoc -charset option generates wrong meta tag
    • S7145454: JVM wide monitor lock in Currency.getInstance(String)
    • S7152892: some jtreg tests fail with permission denied
    • S7153157: ClassValue.get does not return if computeValue calls remove
    • S7156459: Remove unnecessary get() from Currency.getInstance()
    • S7158636: InterfaceAddress.getBroadcast() returns invalid broadcast address on WLAN
    • S7160604: Using non-opaque windows – popups are initially not painted correctly
    • S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails (Invalid key code)
    • S7164841: Improvements to the GC log file rotation
    • S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh failing
    • S7172865: PropertyDescriptor fails to work with setter method name if setter is non-void
    • S7178362: Socket impls should ignore unsupported proxy types rather than throwing
    • S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
    • S7180557: InetAddress.getLocalHost throws UnknownHostException on java7u5 on OSX
    • S7196009: SunPkcs11 provider fails to parse config path containing parenthesis
    • S7199674: (props) user.home property does not return an accessible location in sandboxed environment [macosx]
    • S8001633: Wrong alt processing during switching between windows.
    • S8002148: [TEST_BUG] The four lines printed are not the bold typeface.
    • S8004488: wrong permissions checked in krb5
    • S8006023: Embedded Builds fail management test because of requirement for UsePerfData being enabled.
    • S8008328: [partfait] Null pointer defererence in hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
    • S8008386: (cs) Unmappable leading should be decoded to replacement.
    • S8008759: Do not let internal JDK zlib symbols leak out of fastdebug libzip.so
    • S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails intermittently
    • S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes UnknownHostException to be thrown
    • S8010738: G1: Output for full GCs with +PrintGCDetails should contain perm gen/meta data size change info
    • S8011795: DOM Serializer prints stack traces to System.err
    • S8012625: Incorrect handling of HTTP/1.1 ” Expect: 100-continue ” in HttpURLConnection
    • S8012941: JSR 292: too deep inlining might crash compiler because of stack overflow
    • S8013098: [macosx] localized aqua_xx.properties are not included in rt.jar
    • S8013485: javac can’t handle annotations with a <clinit> from a previous compilation unit
    • S8013849: Awt assert on Hashtable.cpp:124
    • S8014254: Selector in HttpServer introduces a 1000 ms delay when using KeepAlive
    • S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java fails on MacOSX
    • S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
    • S8015780: java/lang/reflect/Method/GenericStringTest.java failing
    • S8016579: (process) IOException thrown by ProcessBuilder.start() method is incorrectly encoded
    • S8017212: File.createTempFile requires unnecessary “read” permission
    • S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
    • S8019834: InetAddress.getByName hangs for bad IPv6 literals
    • S8020675: invalid jar file in the bootclasspath could lead to jvm fatal error
    • S8020829: NMT tests fail on platforms if NMT detail is not supported
    • S8022229: Intermittent test failures in sun/tools/jstatd
    • S8022531: [TEST_BUG] After double-click on the folder names , there is no ‘OK’ button in the dialog.
    • S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR and GET_OWNED_MONITOR
    • S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java fails on Windows
    • S8024677: [TESTBUG] Move tests for classes in /testlibrary
    • S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
    • S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java fails with TestData): failure java.lang.AssertionError: expected [true] but found [false]
    • S8025710: Proxied HTTPS connections reused by HttpClient can send CONNECT to the server
    • S8025917: JDK demo applets not running with >=7u40 or (JDK 8 and JDK 9)
    • S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
    • S8026303: CMS: JVM intermittently crashes with “FreeList of size 258 violates Conservation Principle” assert
    • S8027026: Change keytool -genkeypair to use -keyalg RSA
    • S8027348: (process) Enhancement of handling async close of ProcessInputStream
    • S8027695: There should be a space before % sign in Swedish locale
    • S8027961: Inet[4|6]Address native initializing code should check field/MethodID values
    • S8028073: race condition in ObjectMonitor implementation causing deadlocks
    • S8028074: InetAddress.getByName fails with UHE “invalid IPv6 address” if host name starts with a-f
    • S8028159: C2: compiler stack overflow during inlining of @ForceInline methods
    • S8028280: ParkEvent leak when running modified runThese which only loads classes
    • S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
    • S8029073: (corba) New connection reclaimed when number of connection is greater than highwatermark
    • S8029190: VM_Version::determine_features() asserts on Fujitsu Sparc64 CPUs
    • S8029302: Performance regression in Math.pow intrinsic
    • S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be set in IPv6 header
    • S8029775: Solaris code cleanup
    • S8030114: [parfait] warnings from b119 for jdk.src.share.native.sun.security.smartcardio: JNI exception pending
    • S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java failed with NPE
    • S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java fails if java output contains VM warning
    • S8030878: JConsole issues meaningless message if SSL connection fails
    • S8030976: Untaken paths should be more vigorously pruned at highest optimization level
    • S8031061: new hotspot build – hs24.60-b07
    • S8031068: java/util/logging/ParentLoggersTest.java: checkLoggers: getLoggerNames() returned unexpected loggers
    • S8031435: Ftp download does not work properly for ftp user without password
    • S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java fails on Solaris zones virtual hosts
    • S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
    • S8031572: jarsigner -verify exits with 0 when a jar file is not properly signed
    • S8031743: C2: loadI2L_immI broken for negative memory values
    • S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32 because it Cant attach to the core file
    • S8031765: Child process error stream is not empty!
    • S8032466: serviceability/sa/jmap-hashcode/Test8028623.java fails with compilation errors
    • S8032573: CertificateFactory.getInstance(“X.509″).generateCertificates(InputStream) does not throw CertificateException for invalid input
    • S8032808: Support Solaris SO_FLOW_SLA socket option
    • S8032832: Applet/browser deadlocks, when IIS integrated authentication is used
    • S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting JDev With Voiceover Running
    • S8032901: WaitForMultipleObjects() return value not handled appropriately
    • S8032908: getTextContent doesn’t return string in JAXP
    • S8033524: Set minor version for hotspot in 7u80 to 80 and build number to b01
    • S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c: JNI exception pending
    • S8033627: UTC+02:00 time zones are not detected correctly on Windows
    • S8033699: Incorrect radio button behavior
    • S8033970: new hotspot build – hs24.80-b02
    • S8034118: [parfait] JNI exception pending in macosx/native/sun/awt/JavaComponentAccessibility.m
    • S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
    • S8034768: [parfait] JNI exception pending in jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
    • S8034920: new hotspot build – hs24.80-b03
    • S8035435: new hotspot build – hs24.80-b04
    • S8035973: NPE in ForwardBuilder
    • S8035938: Memory leak in JvmtiEnv::GetConstantPool
    • S8036778: new hotspot build – hs24.80-b05
    • S8036823: Stack trace sometimes shows ‘locked’ instead of ‘waiting to lock’
    • S8036981: JAXB not preserving formatting for xsd:any Mixed content
    • S8037502: build.tools.javazic.Zoneinfo incorrectly calculates raw GMT offset change time
    • S8037945: Paths.get(“”).normalize() throws ArrayIndexOutOfBoundsException
    • S8038274: update 8u fix for 8028073 now that 8028280 is backported to 8u
    • S8038440: backport few C2 fixes
    • S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be manageable through the API
    • S8038640: new hotspot build – hs24.80-b06
    • S8038785: hot workaround fix for a crash in C2 compiler at Node::rematerialize
    • S8038919: Requesting focus to a modeless dialog doesn’t work on Safari
    • S8038961: kinit, klist and ktab aren’t built from jdk7u51 in licensee src bundles
    • S8038966: JAX-WS handles wrongly xsd:any arguments for Web services
    • S8039042: G1: Phantom zeros in cardtable
    • S8039118: Windows build failure (j2pcsc.dll : fatal error unresolved external symbol throwByName)
    • S8039292: new hotspot build – hs24.80-b07
    • S8039368: Remove testcase from npt utf.c
    • S8039891: Remove ppcsflt builds from JPRT
    • S8039899: Missing licence headers in test for JDK-8033113
    • S8040076: Memory leak: java.awt.List objects allowing multiple selections are not GC-ed.
    • S8040664: Revert temporary fix JDK-8038785
    • S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 – assert(! had_error) failed: bad dominance
    • S8041507: Java Access Bridge version strings need to be fixed
    • S8041725: Nimbus JList selection colors persist across L&F changes
    • S8041791: String.toLowerCase regression – violates Unicode standard
    • S8041918: BootstrapMethods attribute cannot be empty.
    • S8041931: test/sun/net/www/http/HttpClient/B8025710.java fails with cannot find keystore
    • S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java failing on all platforms
    • S8041984: CompilerThread seems to occupy all CPU in a very rare situation
    • S8042052: assert(t != NULL) failed: must set before get
    • S8042235: redefining method used by multiple MethodHandles crashes VM
    • S8042247: Make 7u60 the default jprt release for hs24.80
    • S8042250: Misleading command line output for ReservedCodeCacheSize validation
    • S8042465: Applet menus not rendering when browser is full screen on Mac
    • S8042835: Remove mnemonic character from open, save and open directory JFileChooser’s buttons
    • S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
    • S8043129: JAF initialisation in SAAJ clashing with the one in javax.mail
    • S8043354: OptimizePtrCompare too aggressive when allocations are present
    • S8043413: REGRESSION: Hotspot causes segmentation fault in jdk8ux, but not in jdk7ux
    • S8043720: (smartcardio) Native memory should be handled more accurately
    • S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
    • S8044614: [macosx] Focus issue with 2 applets in firefox
    • S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped files (zlib 1.2.8 port)
    • S8046007: Java app receives javax.print.PrintException: Printer is not accepting job
    • S8046024: JDI shared memory transport failed with “Observed abandoned IP mutex”
    • S8046233: VerifyError on backward branch
    • S8046269: Build broken : THIS_FILE : undeclared identifier
    • S8046275: Fastdebug build failing on jdk9/hs/ control jobs after pulling some hs-comp changes
    • S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java failed error_cnt=12
    • S8046289: compiler/6340864/TestLongVect.java timeout with
    • S8046495: KeyEvent can not be accepted in quick mouse clicking
    • S8046516: Segmentation fault in JVM (easily reproducible)
    • S8046559: NPE when changing Windows theme
    • S8046588: test for SO_FLOW_SLA availability does not check for EACCESS
    • S8047186: jdk.net.Sockets throws InvocationTargetException instead of original runtime exceptions
    • S8047187: Test jdk/net/Sockets/Test.java fails to compile after fix JDK-8046588
    • S8047340: (process) Runtime.exec() fails in Turkish locale
    • S8048050: Agent NullPointerException when rmi.port in use
    • S8048110: Using tables in JTextPane leads to infinite loop in FlowLayout.layoutRow
    • S8048170: Test closed/java/text/Normalizer/ConformanceTest.java failed
    • S8048212, PR2418: Two tests failed with “java.net.SocketException: Bad protocol option” on Windows after 8029607
    • S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
    • S8048506: [macosx] javax.swing.PopupFactory issue with null owner
    • S8048887: SortingFocusTraversalPolicy throws IllegalArgumentException from the sort method
    • S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a validator through SchemaFactory
    • S8049684: pstack crashes on java core dump
    • S8050022: linux-sparcv9: assert(SharedSkipVerify || obj->is_oop()) failed: sanity check
    • S8050386: javac, follow-up of fix for JDK-8049305
    • S8050983: Misplaced parentheses in sun.net.www.http.HttpClient break HTTP PUT streaming
    • S8051004: javac, incorrect bug id in tests for JDK-8050386
    • S8051844: BootstrapMethods attribute cannot be empty again
    • S8051857: OperationTimedOut exception inside from XToolkit.syncNativeQueue call
    • S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java fails to compile
    • S8052406: SSLv2Hello protocol may be filter out unexpectedly
    • S8054019: Keytool Error publicKey’s is not X.509, but X509
    • S8054478: C2: Incorrectly compiled char[] array access crashes JVM
    • S8054530: C2: assert(res == old_res) failed: Inconsistency between old and new
    • S8054817: File ccache only recognizes Linux and Solaris defaults
    • S8054841: (process) ProcessBuilder leaks native memory
    • S8054883: Segmentation error while running program
    • S8055045: StringIndexOutOfBoundsException while reading krb5.conf
    • S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
    • S8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException
    • S8055949: ByteArrayOutputStream capacity should be maximal array size permitted by VM
    • S8056026: Debug security logging should print Provider used for each crypto operation
    • S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java fails in Windows
    • S8056309: Set minor version for hotspot in 7u76 to 76 and build number to b01
    • S8056914: Right Click Menu for Paste not showing after upgrading to java 7
    • S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java fails with compilation error
    • S8057530: (process) Runtime.exec throws garbled message in jp locale
    • S8057564: JVM hangs at getAgentProperties after attaching to VM with lower
    • S8057813: Alterations to jdk_security3 test target
    • S8058113: Execution of OnOutOfMemoryError command hangs on linux-sparc
    • S8058120: Rendering / caret errors with HTMLDocument
    • S8058473: “Comparison method violates its general contract” when using Clipboard
    • S8058583: Remove CompilationRepeat
    • S8058608: JVM crash during Kerberos logins using des3-cbc-md5 on OSX
    • S8058927: ATG throws ClassNotFoundException
    • S8058932: java/net/InetAddress/IPv4Formats.java failed because hello.foo.bar does exist
    • S8058935: CPU detection gives 0 cores per cpu, 2 threads per core in Amazon EC2 environment
    • S8058936: hotspot/test/Makefile should use jtreg script from $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
    • S8059216: Make PrintGCApplicationStoppedTime print information about stopping threads
    • S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
    • S8059327: XML parser returns corrupt attribute value
    • S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass should create intermediate directories
    • S8060006: No Russian time zones mapping for Windows
    • S8060169: Update the Crash Reporting URL in the Java crash log
    • S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
    • S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
    • S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
    • S8061954: 7u76 – deployment warning dialogs do not work on Linux
    • S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront after JDK-8060146
    • S8062170: java.security.ProviderException: Error parsing configuration with space
    • S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java fails in 7u-cpu nightly
    • S8062608: BCEL corrupts debug data of methods that use generics
    • S8062672: JVM crashes during GC on various asserts which checks that HeapWord ptr is an oop
    • S8062744: jdk.net.Sockets.setOption/getOption does not support IP_TOS
    • S8062771: Core reflection should use final fields whenever possible
    • S8062923: XSL: Run-time internal error in ‘substring()’
    • S8062924: XSL: wrong answer from substring() function
    • S8064391: More thread safety problems in core reflection
    • S8064407: (fc) FileChannel transferTo should use TransmitFile on Windows
    • S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
    • S8064516: BCEL still corrupts generic methods if bytecode offsets are modified
    • S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
    • S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
    • S8064846: Lazy-init thread safety problems in core reflection
    • S8065098: JColorChooser no longer supports drag and drop between two JVM instances
    • S8065238, PR2478: javax.naming.NamingException after upgrade to JDK 8
    • S8065552: setAccessible(true) on fields of Class may throw a SecurityException
    • S8065553: Failed Java web start via IPv6 (Java7u71 or later)
    • S8065609: 7u76 l10n resource file translation update
    • S8065618: C2 RA incorrectly removes kill projections
    • S8065674: javac generates incorrect LVT table for trivial cases
    • S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
    • S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates instead of using keep-alive
    • S8066045: opto/node.hpp:355, assert(i < _max) failed: oob: i=1, _max=1
    • S8066103: C2′s range check smearing allows out of bound array accesses
    • S8066612: Add a test that will call getDeclaredFields() on all classes and try to set them accessible.
    • S8066649: 8u backport for 8065618 is incorrect
    • S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
    • S8066775: opto/node.hpp:355, assert(i < _max) failed: oob: i=1, _max=1
    • S8068338: Better message about incompatible zlib in Deflater.init
    • S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer system property to jdk.nio.enableFastFileTransfer
    • S8068625: Remove extra year check for GenerateCurrencyData fix
    • S8068639: Make certain annotation classfile warnings opt-in
    • S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
    • S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
    • S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
    • S8072040: jdk7u80 l10n resource file translation update
    • S8072458: jdk/test/Makefile references (to be removed) win32 directory in jtreg
    • S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
    • S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
    • S8075092: Remove erroneous println statement from DoubleByteDecoder
  • Backports
  • Bug fixes
    • PR94: empty install target in Makefile.am
    • PR1374: Provide option to strip and link debugging info after build
    • PR1661: Cleanup SYSTEM_GCONF option and allow it to be set false
    • PR1786: Allow x86 build to occur on x86_64 using a previously built x86_64 build
    • PR1816: Split download/extraction rules for OpenJDK so they can run in parallel
    • PR1846: Build fails when using IcedTea7 as bootstrap JDK with native ecj
    • PR1847: Synchronise javac.in with IcedTea6
    • PR1883: Search Debian multiarch paths when looking for pcsclite
    • PR1888: Allow tarball checksumming to be disabled
    • PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
    • PR2144: make dist fails due to lack of HotSpot-specific patches
    • PR2161: RHEL 6 has a version of GIO which meets the version criteria, but has no g_settings_*
    • PR2233, RH1190835: Discover gsettings symbols separately so early versions of GLib can be used (e.g. on RHEL 6)
    • PR2236, RH1191652: ppc64le should report its os.arch as ppc64le so tools can detect it
    • PR2320: Allow use of system GConf
    • PR2323: System GConf without system GIO configuration broken
    • PR2328: GCJ uses ppc64el named libarch directory on ppc64le
    • PR2341: Update README & INSTALL files
    • PR2359: Ensure all stamp targets have aliases
    • PR2390: Make elliptic curve removal optional
    • PR2394: ppc64le does not support -Xshare:dump
    • PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
    • PR2446: Support system libsctp
    • PR2458: Policy JAR files should be timestamped with the date of the policy file they hold
    • PR2482, RH489586, RH1236619: OpenJDK can’t handle spaces in zone names in /etc/sysconfig/clock
    • PR2496: Enable system PCSC support by default
    • PR2499: Update remove-intree-libraries.sh script
    • PR2507, G541462: Only apply PaX markings by default on running PaX kernels
    • PR2530: PaX mark the installed JDK so it runs on hardened systems
    • PR2531: Location of docs directory in install-data-local is incorrect
    • PR2532: install stage fails where BUILD_ARCH_DIR != INSTALL_ARCH_DIR
    • PR2533: Allow greater control of Javadoc installation directory
    • PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec file does
    • PR2535: install-data-local needs to check that classes.jsa actually exists
    • PR2537: Desktop files do not allow installation from multiple versions of IcedTea
    • PR2539: Libraries in some subdirectories of jre/lib/{arch} are not installed
    • PR2540: Specify a cacerts file for the OpenJDK build as we do for OpenJDK 8
    • PR2545: Extend tarball checksumming option to allow the checksum to be specified
    • PR2548: install stage doesn’t install symbolic links
    • PR2550: Desktop file doesn’t reference versioned icon
  • CACAO
    • PR2380: Raise javadoc and JAVAC_FLAGS memory limits for CACAO
    • PR2519: Update to latest CACAO
    • PR2520: –enable-cacao builds broken, missing JVM_GetTemporaryDirectory impl.
  • JamVM
    • PR2172: –enable-jamvm builds broken, missing JVM_GetTemporaryDirectory impl
    • PR2500: Add executable stack markings to callNative.S on JamVM
  • AArch64 port
    • Add copyright to aarch64_ad.m4
    • S8069593: Changes to JavaThread::_thread_state must use acquire and release
    • S8074349: AARCH64: C2 generates poor code for some byte and character stores
    • S8075045: AARCH64: Stack banging should use store rather than load
    • S8075324: Costs of memory operands in aarch64.ad are inconsistent
    • S8075443: AARCH64: Missed L2I optimizations in C2
    • S8075930: AARCH64: Use FP Register in C2
    • S8076467: AARCH64: assertion fail with -XX:+UseG1GC
    • S8079203: AARCH64: Need to cater for different partner implementations
    • S8080586: aarch64: hotspot test compiler/codegen/7184394/TestAESMain.java fails
  • PPC & AIX port
    • Changes to make aix compile after the merge
    • S8069590: AIX port of “8050807: Better performing performance data handling”
    • S8078482, PR2307, RH1201393: ppc: pass thread to throw_AbstractMethodError
    • S8080190: PPC64: Fix wrong rotate instructions in the .ad file

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this newer key.

SHA256 checksums:

  • b45c829dc937360ed7fbd19505be42007a3abfa8df4afeb77cd9ef70abcdc7a9 icedtea-2.6.0.tar.gz
  • 91c024c6f87cffd7759a79533fa3c7714976f4144d49a142ea27005ee5297874 icedtea-2.6.0.tar.gz.sig
  • ee433e52c29bd66c7714137c71efc47b38aaca7d6e5bb9b5a5a7f00de1e2b103 icedtea-2.6.0.tar.gz.sig.ec
  • 873e92d212530bf573b97976e115f262fef49a6f1ee708d4e5b955643ee970c5 icedtea-2.6.0.tar.xz
  • 058322ffee20ceacf286b634fb1f54f1fde91951f2817e23d4c9071770a32d94 icedtea-2.6.0.tar.xz.sig
  • ae87c622f650a291c83b110cb8bd09b8ba3b61f257a0d248cefb23eae271a40e icedtea-2.6.0.tar.xz.sig.ec

The checksums can be downloaded from:

A 2.6.0 ebuild for Gentoo is available.

The following people helped with these releases:

  • James Le Cuirot (PR2380 CACAO work)
  • Tiago Sturmer Diatx (ppc64le work)
  • Andrew Dinn (AArch64 integration work)
  • Andrew Hughes (all other backports & bug fixes, release management)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.6.0.tar.gz

or:

$ tar x -I xz -f icedtea-2.6.0.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.6.0/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.5.x series with the April 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

Please Note: The backport of jdk.tls.ephemeralDHKeySize is currently modified so as to retain “legacy” mode as the default, which uses 768-bit keys. To use the OpenJDK 8 default (1024-bit keys), pass -Djdk.tls.ephemeralDHKeySize=jdk8 on the command-line. Both OpenJDK 7 & 8 allow the use of “matched” mode which creates an ephemeral DH key matching the size of the authentication key, or the specification of a key size between 1024 and 2048 bits inclusive.

What’s New?

New in release 2.5.5 (2015-04-14)

  • Security fixes
  • Backports
    • S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback should not be invoked when string value is null
    • S6956398, PR2250: make ephemeral DH key match the length of the certificate key
    • S7090424: TestGlyphVectorLayout failed automately with java.lang.StackOverflowError
    • S7142035: assert in j.l.instrument agents during shutdown when daemon thread is running
    • S7195480: javax.smartcardio does not detect cards on Mac OS X
    • S8001472: api/java_awt/Window/indexTGF_* tests fail because expected colors aren’t equal
    • S8011646: SEGV in compiled code with loop predication
    • S8012637: Adjust CipherInputStream class to work in AEAD/GCM mode
    • S8016545: java.beans.XMLEncoder.writeObject output is wrong
    • S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field change
    • S8019623: Lack of synchronization in AppContext.getAppContext()
    • S8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert
    • S8022070: Compilation error in stubGenerator_sparc.cpp with some compilers
    • S8024061: Exception thrown when drag and drop between two components is executed quickly
    • S8028616: Htmleditorkit parser doesn’t handle leading slash (/)
    • S8028617: Dvorak keyboard mapping not honored when ctrl key pressed
    • S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty since 7u40b33
    • S8031290: Adjust call to getisax() for additional words returned
    • S8032872: [macosx] Cannot select from JComboBox in a JWindow
    • S8032874: ArrayIndexOutOfBoundsException in JTable while clearing data in JTable
    • S8032878: Editable combos in table do not behave as expected
    • S8033113: wsimport fails on WSDL:header parameter name customization
    • S8033696: “assert(thread != NULL) failed: just checking” due to Thread::current() and JNI pthread interaction
    • S8036022: D3D: rendering with XOR composite causes InternalError.
    • S8036709: Java 7 jarsigner displays warning about cert policy tree
    • S8036819: JAB: mneumonics not read for textboxes
    • S8036983: JAB:Multiselection Ctrl+CursorUp/Down and ActivateDescenderPropertyChanged event
    • S8037477: Reproducible hang of JAWS and webstart application with JAB 2.0.4
    • S8038925: Java with G1 crashes in dump_instance_fields using jmap or jcmd without fullgc
    • S8039050: Crash in C2 compiler at Node::rematerialize
    • S8039298: assert(base == NULL || t_adr->isa_rawptr() || ! phase->type(base)->higher_equal(TypePtr::NULL_PTR))
    • S8039319: (smartcardio) Card.transmitControlCommand() does not work on Mac OS X
    • S8040228: TransformerConfigurationException occurs with security manager, FSP and XSLT Ext
    • S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh fails to cleanup files after it
    • S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should abandon ldap request
    • S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh fails on Mac
    • S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java failing on all platforms
    • S8042059: Various fixes to linux/sparc
    • S8042857: 14 stuck threads waiting for notification on LDAPRequest
    • S8043123: Hard crash with access violation exception when blitting to very large image
    • S8043200: Decrease the preference mode of RC4 in the enabled cipher suite list
    • S8043205: Incorrect system traps.h include path
    • S8043206: Fix signed vs. unsigned comparison warning in copy_sparc.hpp
    • S8043207: Add const to Address argument for Assembler::swap
    • S8043210: Add _BIG_ENDIAN define on linux/sparc
    • S8043507: javax.smartcardio.CardTerminals.list() fails on MacOSX
    • S8044602: Increment minor version of HSx for 7u72 and initialize the build number
    • S8044659: Java SecureRandom on SPARC T4 much slower than on x86/Linux
    • S8046769: Set T family feature bit on Niagara systems
    • S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel() dosn’t work on MacOSX
    • S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
    • S8049542: C2: assert(size_in_words <= (julong)max_jint) failed: no overflow
    • S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
    • S8050158: Introduce system property to maintain RC4 preference order
    • S8050165: linux-sparcv9: NMT detail causes assert((intptr_t*)younger_sp[FP->sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp – STACK_BIAS)) failed: younger_sp must be valid
    • S8050167: linux-sparcv9: hs_err file does not show any stack information
    • S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
    • S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002] failure
    • S8060072: Increment minor version of HSx for 7u79 and initialize the build number
    • S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh fails for Mac and Linux
    • S8064532: 7u76 build failed with # 8041979
    • S8065072: sun/net/www/http/HttpClient/StreamingRetry.java failed intermittently
    • S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D drawing of derived Fonts
    • S8065709: Deadlock in awt/logging apparently introduced by 8019623
    • S8065991: LogManager unecessarily calls JavaAWTAccess from within a critical section
    • S8068405: GenerateCurrencyData throws RuntimeException for old data
    • S8071591: java/util/logging/LogManagerAppContextDeadlock.java test started to fail due to JDK-8065991
    • S8072039: jdk7u79 l10n resource file translation update
    • S8072042: (tz) Support tzdata2015a
    • S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
    • S8074312, PR2254, G541270: Enable hotspot builds on 4.x Linux kernels
    • S8074662: Update 3rd party readme and license for LibPNG v 1.6.16
    • S8075211: [TEST_BUG] Test sun/net/www/http/HttpClient/StreamingRetry.java fails with compilation error
  • Bug fixes
    • PR2196, RH1164762: jhat man page has broken URL
    • PR2200, G531686: Support giflib 5.1.0
    • PR2210: DGifCloseFile call should check the return value, not the error code, for failure
    • PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
    • PR2250: JSSE server is still limited to 768-bit DHE
  • ARM32 port
    • PR2228: Add ARM32 JIT
    • PR2297: Use the IcedTea 2.6.0 HotSpot on ARM32 by default
    • Several bug fixes to get Eclipse working
  • AArch64 port
    • Add java.lang.ref.Reference.get intrinsic to template interpreter
    • Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
    • Remove insanely large stack allocation in entry frame.
    • S6976528: PS: assert(!limit_exceeded || softrefs_clear) failed: Should have been cleared
    • S8020675: invalid jar file in the bootclasspath could lead to jvm fatal error
    • S8020829: NMT tests fail on platforms if NMT detail is not supported
    • S8026303: CMS: JVM intermittently crashes with “FreeList of size 258 violates Conservation Principle” assert
    • S8029775: Solaris code cleanup
    • S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java failing on all platforms
    • S8042235: redefining method used by multiple MethodHandles crashes VM
    • S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
    • S8046233: VerifyError on backward branch
    • S8046289: compiler/6340864/TestLongVect.java timeout with
    • S8048170: Test closed/java/text/Normalizer/ConformanceTest.java failed
    • S8050022: linux-sparcv9: assert(SharedSkipVerify || obj->is_oop()) failed: sanity check
    • S8054478: C2: Incorrectly compiled char[] array access crashes JVM
    • S8054530: C2: assert(res == old_res) failed: Inconsistency between old and new
    • S8054883: Segmentation error while running program
    • S8056309: Set minor version for hotspot in 7u76 to 76 and build number to b01
    • S8058583: Remove CompilationRepeat
    • S8058935: CPU detection gives 0 cores per cpu, 2 threads per core in Amazon EC2 environment
    • S8059216: Make PrintGCApplicationStoppedTime print information about stopping threads
    • S8060169: Update the Crash Reporting URL in the Java crash log
    • S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
    • S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
    • S8062229: Test failure of test_loggc_filename in 7u-cpu
    • S8062672: JVM crashes during GC on various asserts which checks that HeapWord ptr is an oop
    • S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
    • S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
    • S8065618: C2 RA incorrectly removes kill projections
    • S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
    • S8066045: opto/node.hpp:355, assert(i < _max) failed: oob: i=1, _max=1
    • S8066103: C2′s range check smearing allows out of bound array accesses
    • S8066649: 8u backport for 8065618 is incorrect
    • S8066775: opto/node.hpp:355, assert(i < _max) failed: oob: i=1, _max=1
    • S8071947: AARCH64: frame::safe_for_sender() computes incorrect sender_sp value for interpreted frames
    • S8072129: [AARCH64] missing fix for 8066900
    • S8072483: AARCH64: aarch64.ad uses the wrong operand class for some operations

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

SHA256 checksums:

  • f05b1db06021f4cd3a39647f358a47130136d189431fb55f79855f627b1d6619 icedtea-2.5.5.tar.gz
  • 4863db17fa8afbbedf8bb4d19d9e520652d859e806b7abf27a86d71c483172f6 icedtea-2.5.5.tar.gz.sig/li>
  • 738dfcdbd59cf9093203934d4efa94281fb2e28cff1c9ec6d9b588ad42bac66f icedtea-2.5.5.tar.gz.sig.ec/li>
  • 09e7aeb739a468dec8357f4b0757624b6c7ef38065fdf50323d369deac983dc7 icedtea-2.5.5.tar.xz/li>
  • c47744296d5569a251d2ef8ed891fd91a223adb0ac460db5270583d3fa6d4288 icedtea-2.5.5.tar.xz.sig/li>
  • 61e1c6c89f3fb4623bef5a3375ecebf185d713b5460c6ca1ac87f1328cecb2a9 icedtea-2.5.5.tar.xz.sig.ec/li>

The checksums can be downloaded from:

A 2.5.5 ebuild for Gentoo is available.

The following people helped with these releases:

  • Andrew Dinn (AArch64 work)
  • Severin Gehwolf (S8074312)
  • Andrew Haley (S6584008)
  • Andrew Hughes (all other backports & bug fixes, release management)
  • Edward Nevill (ARM32 work including PR2228)
  • Fridrich Strba (PR2200)
  • Jiri Vanek (PR2196)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.5.5.tar.gz

or:

$ tar x -I xz -f icedtea-2.5.5.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.5.5/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as a PulseAudio sound driver, the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 6 support in the 1.13.x series with the April 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

What’s New?

New in release 1.13.7 (2015-04-14)

  • Security fixes
  • Import of OpenJDK6 b35
    • OJ55: Synchronise whitespace in TimeZoneNames files with OpenJDK 7 versions.
    • OJ56: Update 3rd party readme and license for LibPNG v 1.6.16
    • OJ57: Remove mistakenly added patching fragment
    • S6672144: HttpURLConnection.getInputStream sends POST request after failed chunked
    • S6989721: awt native code compiler warnings
    • S7088287: libpng need to be updated.
    • S7090424: TestGlyphVectorLayout failed automately with java.lang.StackOverflowError
    • S7170655: Frame size does not follow font size change with XToolkit
    • S7176479: G1: JVM crashes on T5-8 system with 1.5 TB heap
    • S8019623: Lack of synchronization in AppContext.getAppContext()
    • S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh fails to cleanup files after it
    • S8043123: Hard crash with access violation exception when blitting to very large image
    • S8051359: JPopupMenu creation in headless mode with JDK9b23 causes NPE
    • S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh fails for Mac and Linux
    • S8065072: sun/net/www/http/HttpClient/StreamingRetry.java failed intermittently
    • S8065709: Deadlock in awt/logging apparently introduced by 8019623
    • S8072042: (tz) Support tzdata2015a
    • S8074662: Update 3rd party readme and license for LibPNG v 1.6.16
    • S8075211: [TEST_BUG] Test sun/net/www/http/HttpClient/StreamingRetry.java fails with compilation error
  • Backports
    • S6584008, PR2195, RH1173326: jvmtiStringPrimitiveCallback should not be invoked when string value is null
    • S7199862, PR2198: Make sure that a connection is still alive when retrieved from KeepAliveCache in certain cases
    • S8074312, PR2255: Enable hotspot builds on Linux 4.x
  • Bug fixes
    • PR2197: jhat man page has broken URL
    • PR2201: Support giflib 5.1.0
    • PR2211: DGifCloseFile call should check the return value, not the error code, for failure
    • PR2226: giflib 5.1 conditional excludes 6.0, 7.0, etc.
    • PR2294: Auto-generated jconsole.desktop and policytool.desktop should not be included in release tarball

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

SHA256 checksums:

  • 1cd6dc97d729eaae8d3a102010934f171752eeb50046f609c2f3d6b0cf29fa45 icedtea6-1.13.7.tar.gz
  • f380e1fe2a1cf1a8feb8ea26fbad5cfc4c4a12b0da1b28467b6cdab4b73cb0c8 icedtea6-1.13.7.tar.gz.sig
  • f2b161bccb9bb3de06bdb7e046565272b53149cf865a123ceaa87d1793df96ab icedtea6-1.13.7.tar.gz.sig.ec
  • a5ca64ae94ec27d28be91f4f0624164f9b4e6e92e417e52b296556005142183b icedtea6-1.13.7.tar.xz
  • 0c2c0dc60422eaef7cd30f019c9af370252a818e2d42128d6d9ab1902ba0bca7 icedtea6-1.13.7.tar.xz.sig
  • db51815eb42b72fcde286c2a68669c7007c2b4f2ddf832306c4715dd26b1e9bf icedtea6-1.13.7.tar.xz.sig.ec

The checksums can be downloaded from:

A 1.13.7 ebuild for Gentoo is available.

The following people helped with these releases:

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea6-1.13.7.tar.gz

or:

$ tar x -I xz -f icedtea6-1.13.7.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea6-1.13.7/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as a PulseAudio sound driver, the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 6 support in the 1.13.x series with the January 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

What’s New?

New in release 1.13.6 (2015-01-23)

  • Security fixes
  • Import of OpenJDK6 b34
    • OJ43: Backport JAX_WS-945; Socket backlog may be limiting lwhs performance
    • OJ44: Add missing TimeZone test cases included in OpenJDK 7 revision 0.
    • OJ45: Fix copyright headers on imported files
    • OJ46: Fix lost Classpath exception
    • OJ47: Remove @Override annotation on interfaces added by 2015/01/20 security fixes.
    • OJ48: Fix substitution error.
    • OJ49: Fix placement of 8023956 fix.
    • OJ50: Fix reference to missing pd_attempt_reserve_memory_at
    • S4873188: Support TLS 1.1
    • S6364329: jstat displays “invalid argument count” with usage
    • S6461635: [TESTBUG] BasicTests.sh test fails intermittently
    • S6507067: TimeZone country/area message error
    • S6545422: [TESTBUG] NativeErrors.java uses wrong path name in exec
    • S6578647: Undefined requesting URL in java.net.Authenticator.getPasswordAuthentication()
    • S6585666: Spanish language names not compliant with CLDR
    • S6587676: Krb5LoginModule failure if useTicketCache=true on Vista
    • S6608572: Currency change for Malta and Cyprus
    • S6610748: Dateformat – AM-PM indicator in Finnish appears to be from English
    • S6627549: ISO 3166 code addition: Saint Barthelemy and Saint Martin
    • S6631048: Problem when writing on output stream of HttpURLConnection
    • S6641309: Wrong Cookie separator used in HttpURLConnection
    • S6641312: Fix krb5 codes indentation problems
    • S6645271: Wrong date format for Croatian (hr) locale
    • S6646611: Incorrect spelling of month name in locale for Belarusian language (“be”, “BY”)
    • S6647452: Remove obfuscation, framework and provider self-verification checking
    • S6653795: C2 intrinsic for Unsafe.getAddress performs pointer sign extension on 32-bit systems
    • S6659779: HttpURLConnections logger should log tunnel requests
    • S6670362: HTTP/SPNEGO should work across realms
    • S6716626: Integrate contributed language and country names for NL
    • S6720866: Slow performance using HttpURLConnection for upload
    • S6726695: HttpURLConnection shoul support ‘Expect: 100-continue’ headers for PUT
    • S6729881: Compiler warning in networking native code
    • S6765491: Krb5LoginModule a little too restrictive, and the doc is not clear.
    • S6776102: sun/util/resources/TimeZone/Bug6317929.java test failed against 6u12b01 and passed against 6u11b03
    • S6786276: Locale.getISOCountries() still contains country code “CS”
    • S6792180: Enhance to reject weak algorithms or conform to crypto recommendations
    • S6811297: Add more logging to HTTP protocol handler
    • S6822460: support self-issued certificate
    • S6830658: Changeset 67e5d3e41b5b breaks the fastdebug build in NativeCreds.c
    • S6835668: Use of /usr/include/linux/ files creates a dependence on kernel-headers
    • S6855297: Windows build breaks after 6811297
    • S6856856: NPE in HTTP protocol handler logging
    • S6868106: Ukrainian currency has wrong format
    • S6870908: reopen bug 4244752: month names in Estonian should be lowercase
    • S6873931: New Turkish currency since 2009
    • S6882594: Remove static dependancy on NTLM authentication
    • S6899503: Security code issue using Verisign root certificate
    • S6910489: Slovenia Locale, wrong firstDayOfWeek number
    • S6911104: Tests do not work with CYGWIN: tools, sun/tools, and com/sun/tools
    • S6914413: abbreviation name for November is not correct in be_BY
    • S6916787: Ukrainian currency name needs to be fixed
    • S6919624: minimalDaysInFirstWeek ressource for hungarian is wrong
    • S6931564: Incorrect display name of Locale for south africa
    • S6931566: NetworkInterface is not working when interface name is more than 15 characters long
    • S6938454: 2 new testcases for bug: Unable to determine generic type in program that compiles under Java 6
    • S6938454: Unable to determine generic type in program that compiles under Java 6
    • S6945604: wrong error message in CardImpl.java
    • S6962617: Testcase changes, cleanup of problem list for jdk_tools targets
    • S6964714: NetworkInterface getInetAddresses enumerates IPv6 addresses if java.net.preferIPvStack property set
    • S6967937: Scope id no longer being set after 6931566
    • S6972374: NetworkInterface.getNetworkInterfaces throws “java.net.SocketException” on Solaris zone
    • S6976117: SSLContext.getInstance(“TLSv1.1″) returns SSLEngines/SSLSockets without TLSv1.1 enabled
    • S7001720: copyright templates not rebranded
    • S7019267: Currency Display Names are not localized into pt_BR.
    • S7020583: Some currency names are missing in some locales
    • S7020960: CurrencyNames_sr_RS.properties is missing.
    • S7022269: clean up fscanf usage in Linux networking native code
    • S7025837: fix plural currency display names in sr_Latn_(BA|ME|RS).properties
    • S7028073: The currency symbol for Peru is wrong
    • S7035555: 4/4 attach/BasicTests.sh needs another tweak for Cygwin
    • S7036025: java.security.AccessControlException when creating JFileChooser in signed applet
    • S7036905: [de] dem – the german mark display name is incorrect
    • S7047033: (smartcardio) Card.disconnect(boolean reset) does not reset when reset is true
    • S7066203: Update currency data to the latest ISO 4217 standard
    • S7077119: remove past transition dates from CurrencyData.properties file
    • S7085757: Currency Data: ISO 4217 Amendment 152
    • S7122142, RH1151372: (ann) Race condition between isAnnotationPresent and getAnnotations
    • S7153184: NullPointerException when calling SSLEngineImpl.getSupportedCipherSuites
    • S7161796, RH1151372: PhaseStringOpts::fetch_static_field tries to fetch field from the Klass instead of the mirror
    • S7171028: dots are missed in the datetime for Slovanian
    • S7174244: NPE in Krb5ProxyImpl.getServerKeys()
    • S7185456: (ann) Optimize Annotation handling in java/sun.reflect.* code for small number of annotations
    • S7189611: Venezuela current Currency should be Bs.F.
    • S7195759: ISO 4217 Amendment 154
    • S7199066: Typo in method name
    • S7201205: Add Makefile configuration option to build with unlimited crypto in OpenJDK.
    • S8005232: (JEP-149) Class Instance size reduction
    • S8006748: getISO3Country() returns wrong value
    • S8013836: getFirstDayOfWeek reports wrong day for pt-BR locale
    • S8015421: NegativeArraySizeException occurs in ChunkedOutputStream() with Integer.MAX_VALUE
    • S8015570: Use long comparison in Rule.getRules().
    • S8021121: ISO 4217 Amendment Number 156
    • S8021372: NetworkInterface.getNetworkInterfaces() returns duplicate hardware address
    • S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws java.lang.IllegalStateException: unexpected condition
    • S8023956: Provide a work-around to broken Linux 32 bit “Exec Shield” using CS for NX emulation (crashing with SI_KERNEL)
    • S8025051: Update resource files for TimeZone display names
    • S8026772: test/sun/util/resources/TimeZone/Bug6317929.java failing
    • S8027359: XML parser returns incorrect parsing results
    • S8027370: Support tzdata2013h
    • S8027695: There should be a space before % sign in Swedish locale
    • S8028627: Unsynchronized code path from javax.crypto.Cipher to the WeakHashMap used by JceSecurity to store codebase mappings
    • S8028726: (prefs) Check src/solaris/native/java/util/FileSystemPreferences.c for JNI pending exceptions
    • S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java fails because it expects NullPointerException
    • S8029318: Native Windows ccache still reads DES tickets
    • S8030822: (tz) Support tzdata2013i
    • S8031046: Native Windows ccache might still get unsupported ticket
    • S8032788: ImageIcon constructor throws an NPE and hangs when passed a null String parameter
    • S8032909: XSLT string-length returns incorrect length when string includes complementary chars
    • S8035613: With active Securitymanager JAXBContext.newInstance fails
    • S8037012: (tz) Support tzdata2014a
    • S8038306: (tz) Support tzdata2014b
    • S8040617: [macosx] Large JTable cell results in a OutOfMemoryException
    • S8041990: [macosx] Language specific keys does not work in applets when opened outside the browser
    • S8043012: (tz) Support tzdata2014c
    • S8046343: (smartcardio) CardTerminal.connect(‘direct’) does not work on MacOSX
    • S8049250: Need a flag to invert the Card.disconnect(reset) argument
    • S8049343: (tz) Support tzdata2014g
    • S8050485: super() in a try block in a ctor causes VerifyError
    • S8051012: Regression in verifier for <init> method call from inside of a branch
    • S8051614: smartcardio TCK tests fail due to lack of ‘reset’ permission
    • S8055222: Currency update needed for ISO 4217 Amendment #159
    • S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002] failure
    • S8058715: stability issues when being launched as an embedded JVM via JNI
    • S8059206: (tz) Support tzdata2014i
    • S8060474: Resolve more parsing ambiguity
    • S8061826: Part of JDK-8060474 should be reverted
    • S8062561: Test bug8055304 fails if file system default directory has read access
    • S8062807: Exporting RMI objects fails when run under restrictive SecurityManager
    • S8064560: (tz) Support tzdata2014j
  • Backports
    • OJ51, PR2187: Sync patch for 4873188 with 7 version
    • OJ52, PR2185: Application of 6786276 introduces compatibility issue
    • OJ53, PR2181: strict-aliasing warnings issued on PPC32
    • OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
    • S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: “Bad address”
    • S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
    • S8000897, PR2173, RH1155012: VM crash in CompileBroker
    • S8020190, PR2174, RH1176718: Fatal: Bug in native code: jfieldID must match object
    • S8028623, PR2177, RH1168693: SA: hash codes in SymbolTable mismatching java_lang_String::hash_code for extended characters.
    • S8061785, PR2177: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java has utf8 character corrupted by earlier merge
  • Bug fixes
    • PR1831: Drop version requirement for LCMS 2
    • PR1832, RH1022017: Report elliptic curves supported by NSS, not the SunEC library
    • PR2033: patches/ecj/jaxws-getdtdtype.patch no longer applies since removal of JAXWS drop
    • PR2062: Unset OS before running OpenJDK build
    • PR2070: Type-punning warnings still evident on RHEL 5
    • PR2082: Cast should use same type as GCDrainStackTargetSize (uintx).
    • PR2096, RH1163501: 2048-bit DH upper bound too small for Fedora infrastructure
    • PR2125: Synchronise elliptic curves in sun.security.ec.NamedCurve with those listed by NSS
    • PR2179: Avoid x86 workaround when running Zero rather than a JIT
    • PR2180: Old autotools dislike $(builddir)/fsg.sh
  • CACAO
    • PR2184: CACAO lacks JVM_FindClassFromCaller introduced by security patch in 1.13.5
  • JamVM
    • PR2190: JamVM lacks JVM_FindClassFromCaller introduced by security patch in 1.13.5

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

SHA256 checksums:

  • eb06a1e9a16f6473ffac4072c753e8e0fd1c39ad00016bcbd984534a93189e52 icedtea6-1.13.6.tar.gz
  • 1e62fe97d4a6dfe641373889534741ec5f06d268e2ea14a8f4ff505560e1c3f8 icedtea6-1.13.6.tar.gz.sig
  • 356edb04945690e216f0569e9dc8afd8f55c2a0dfc8816a904e63506220cb523 icedtea6-1.13.6.tar.gz.sig.ec
  • 2090f3a9e4b045073f8fcd147848e3b94b389fa2740b20ded4c5d2398f1b4c99 icedtea6-1.13.6.tar.xz
  • ac02dc6515afcf2aac2d731e56b7aa6c987e98b7c7a9ed214e4e4a08d2b21528 icedtea6-1.13.6.tar.xz.sig
  • 1fa7b55a960cbf3db4000e170c95b3e78413fef45655609de05f55a7c5012347 icedtea6-1.13.6.tar.xz.sig.ec

The checksums can be downloaded from:

A 1.13.6 ebuild for Gentoo is available.

The following people helped with these releases:

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea6-1.13.6.tar.gz

or:

$ tar x -I xz -f icedtea6-1.13.6.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea6-1.13.6/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.5.x series with the January 2015 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

What’s New?

New in release 2.5.4 (2015-01-21)

  • Security fixes
  • Backports
    • S6461635: [TESTBUG] BasicTests.sh test fails intermittently
    • S6545422: [TESTBUG] NativeErrors.java uses wrong path name in exec
    • S6653795: C2 intrinsic for Unsafe.getAddress performs pointer sign extension on 32-bit systems
    • S7028073: The currency symbol for Peru is wrong
    • S7047033: (smartcardio) Card.disconnect(boolean reset) does not reset when reset is true
    • S7183753: [TEST] Some colon in the diff for this test
    • S7077119, PR2165, G534118: remove past transition dates from CurrencyData.properties file
    • S7085757: Currency Data: ISO 4217 Amendment 152
    • S7169142: CookieHandler does not work with localhost
    • S7172012, PR2067: Make test-in-build an option (Queens)
    • S7185456: (ann) Optimize Annotation handling in java/sun.reflect.* code for small number of annotations
    • S7195759: ISO 4217 Amendment 154
    • S8000897, RH1155012: VM crash in CompileBroker
    • S8001105: findVirtual of Object[].clone produces internal error
    • S8005232: (JEP-149) Class Instance size reduction
    • S8006748: getISO3Country() returns wrong value
    • S8012026: [macosx] Component.getMousePosition() does not work in an applet on MacOS
    • S8015421: NegativeArraySizeException occurs in ChunkedOutputStream() with Integer.MAX_VALUE
    • S8020190, PR2160, RH1176718: Fatal: Bug in native code: jfieldID must match object
    • S8021121: ISO 4217 Amendment Number 156
    • S8021372: NetworkInterface.getNetworkInterfaces() returns duplicate hardware address
    • S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws java.lang.IllegalStateException: unexpected condition
    • S8025051: Update resource files for TimeZone display names
    • S8026792: HOTSPOT: licensee reports a JDK8 build failure after 8005849/8005008 fixes integrated.
    • S8027359: XML parser returns incorrect parsing results
    • S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable mismatching java_lang_String::hash_code for extended characters.
    • S8028627: Unsynchronized code path from javax.crypto.Cipher to the WeakHashMap used by JceSecurity to store codebase mappings
    • S8028726: (prefs) Check src/solaris/native/java/util/FileSystemPreferences.c for JNI pending exceptions
    • S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java fails because it expects NullPointerException
    • S8031046: Native Windows ccache might still get unsupported ticket
    • S8031502: JSR292: IncompatibleClassChangeError in LambdaForm for CharSequence.toString() method handle type converter
    • S8032078: [macosx] CPlatformWindow.setWindowState throws RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
    • S8032669: Mouse release not being delivered to Swing component in 7u45
    • S8032788: ImageIcon constructor throws an NPE and hangs when passed a null String parameter
    • S8032909: XSLT string-length returns incorrect length when string includes complementary chars
    • S8034200: Test java/net/CookieHandler/LocalHostCookie.java fails after fix of JDK-7169142
    • S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
    • S8040168: Set hotspot version to hs24.66 and build to b01 for 7u66
    • S8040617: [macosx] Large JTable cell results in a OutOfMemoryException
    • S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
    • S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
    • S8041572: [macosx] huge native memory leak in AWTWindow.m
    • S8041990: [macosx] Language specific keys does not work in applets when opened outside the browser
    • S8043610: Sorting columns in JFileChooser fails with AppContext NPE
    • S8044603: Increment minor version of HSx for 7u71 and initialize the build number
    • S8046343: (smartcardio) CardTerminal.connect(‘direct’) does not work on MacOSX
    • S8049250: Need a flag to invert the Card.disconnect(reset) argument
    • S8049343: (tz) Support tzdata2014g
    • S8049758: Increment minor version of HSx for 7u75 and initialize the build number
    • S8050485: super() in a try block in a ctor causes VerifyError
    • S8051359: JPopupMenu creation in headless mode with JDK9b23 causes NPE
    • S8051614: smartcardio TCK tests fail due to lack of ‘reset’ permission
    • S8055222: Currency update needed for ISO 4217 Amendment #159
    • S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002] failure
    • S8057184: JCK8′s api/javax_swing/JDesktopPane/descriptions.html#getset failed with GTKLookAndFeel on Linux and Solaris
    • S8058715: stability issues when being launched as an embedded JVM via JNI
    • S8059206: (tz) Support tzdata2014i
    • S8060474: Resolve more parsing ambiguity
    • S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
    • S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java has utf8 character corrupted by earlier merge
    • S8061826: Part of JDK-8060474 should be reverted
    • S8062561: Test bug8055304 fails if file system default directory has read access
    • S8062807: Exporting RMI objects fails when run under restrictive SecurityManager
    • S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
    • S8064560: (tz) Support tzdata2014j
    • S8065608: 7u75 l10n resource file translation update
    • S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
    • S8066747: Backing out Japanese translation change in awt_ja.properties
    • S8067364, PR2145, RH1146622: Printing to Postscript doesn’t support dieresis
  • Bug fixes
    • PR2064: Unset OS before running OpenJDK build
    • PR2069: Type-punning warnings still evident on RHEL 5
    • PR2094, RH1163501: 2048-bit DH upper bound too small for Fedora infrastructure
    • PR2123: SunEC provider crashes when built using system NSS
    • PR2124: Synchronise elliptic curves in sun.security.ec.NamedCurve with those listed by NSS
    • PR2135: Race condition in SunEC provider with system NSS
    • PR2161: RHEL 6 has a version of GIO which meets the version criteria, but has no g_settings_*
  • CACAO
    • PR2032: CACAO lacks JVM_FindClassFromCaller introduced by security patch in 2.5.3
  • JamVM
    • PR2050: JamVM lacks JVM_FindClassFromCaller introduced by security patch in 2.5.3
    • PR2171: JamVM builds with executable stack, causing failures on SELinux & PaX kernels
  • AArch64 port
    • Use the IcedTea7 fork version rather than the one based on HotSpot 25.
    • Add arch-specific processing of tmp1 register needed for d/f2i
    • Add char_array_equals intrinsic
    • Add CNEG and CNEGW to macro assembler.
    • Add frame anchor fences.
    • Add missing instruction synchronization barriers and cache flushes.
    • Add some memory barriers for object creation and runtime calls.
    • Add support for A53 multiply accumulate
    • Add support for AES Intrinsics
    • Add support for pipeline scheduling
    • Add support for String.indexOf intrinsic
    • Added make rules to allow aarch64-x86 hybrid build to progress
    • Added missing aarch64-specific include
    • Added missing aarch64-specific make file
    • Added missing changes for debug code
    • Added missing inline method
    • Added missing shared global UseCRC32Intrinsics
    • Added pd global UseVectoredExceptions
    • Add local method to redirect to AbstractAssembler::relocate
    • Add missing declarations for CRC32 methods
    • Add missing include
    • Add missing special case code for aarch64
    • Add rules to assemble .S files
    • Add support for storing aarch64 call format
    • Add wrapper method to avoid dependency on not yet defined code buffer class
    • Added missing endif
    • Allow for 0×400 aligned offsets for byte_map_base
    • Array load must only read 32 bits
    • A more efficient sequence for C1_MacroAssembler::float_cmp.
    • Backout 8c8b5e62e624 and instead move .S rule from zeroshark.make to rules.make
    • Backout additional changes made in ec6a6772fed6, which revert parts of the PPC/AIX port and IcedTea fixes.
    • Call ICache::invalidate_range() from Relocation::pd_set_data_value().
    • Changed klass oop encode to heap oop encode
    • Changed Method* to methodOop
    • Correct assert to allow for AArch64
    • Correct for difference in include hierarchy
    • Correct typos
    • Corrected error in disassembler code
    • Corrected include
    • Corrected include path
    • Corrected pipeline class for countTrailingZerosL
    • Corrected type
    • Corrected typo
    • Correct includes
    • Correct Method to methdoOopDesc
    • Define uabs(). Use it everywhere an absolute value is wanted.
    • Defn of BIND does not need to use __ macro
    • Delete dead code.
    • Disassembler library should be built as hsdis-aarch64.so
    • Don’t test arraycopy routines when using AArch64 simulator
    • Emit_int64 is renamed
    • Ensure byte_map_base can be loaded using adrp with no need for following ldr
    • Ensure C1 static call stub employs absolute move to allow patching
    • Ensure C2 static calls use correct call adddress in static stub reloc
    • Ensure perm gen size is not rounded down to zero
    • Ensure rmethod is reloaded from stack when interpreter makes non leaf VM call
    • Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
    • Fix couple of mistakes in generate of method handle dispatch
    • Fix cut and paste-o in header
    • Fixed another typo
    • Fixed error in include
    • Fixed hsdis for aarch64 native or simulated
    • Fixed various typos and omissions
    • Fixed various typos, overlooked cases and wrong accessors
    • Fix error introduced into profiling code
    • Fix guarantee failure in synchronizer.cpp
    • Fix more errors introduced into interpreter profile counter increment
    • Fix relocations
    • Fix several small typos
    • Fix some typos
    • Fix thinko in Atomic::xchg_ptr.
    • Fix typo
    • Fix up aarch64-specific patching code
    • Fix up crc32 support
    • Fix various typos
    • Get rid of unnecessary declaration
    • Guess at how to implement C1 deoptimize_trap generator
    • Initial cut of aarch64 code pulled from jdk8 tree
    • Make aarch64-x86 hybrid build use correct paths
    • Make hsdis handle aarch64 native case
    • Make static stubs load methodOop in cpool to avoid problems at GC
    • Miscellaneous bug fixes.
    • Missing change needed to support aarch64 build
    • Modified make files to support aarch64 build
    • Modified shared src to support full aarch64 backport
    • Moved fields which need access from java to top level
    • Need to actually return the adapter code size
    • Need to pass CFLAGS when assembling .S files using CC_COMPILE
    • Need to use class handle not class
    • Provide missing CRC32 methods
    • Reload rcpool register after a VM call in case a permgen GC has moved the cache
    • Relocated aarch64 vtable generate code to conform to jdk7
    • Remove comment to avoid breaking macro
    • Removed aarch64 compiled_IC implementation to conform to jdk7
    • Removed metaspaceShared code to conform to jdk7
    • Removed redundant field use_XOR_for_compressed_class_base
    • Removed some errors in signal handling code
    • Removed undefined metadata case
    • Remove redundant bracket
    • Remove support for volatile load/store rules in ad file
    • Renamed emit_int32 to emit_long and added local emit_long64 in place of missing emit_int64
    • Restored missing open brace
    • Restored several load_heap_oop calls lost in translation
    • Restore working x86 build
    • Reverted aarch64 architecture description (ad) file to conform to jdk7
    • Reverted aarch64 c1_xxx files to conform to jdk7
    • Reverted aarch64 c2 globals to conform to jdk7
    • Reverted aarch64 frame code to conform to jdk7
    • Reverted aarch64 runtime code to conform to jdk7
    • Reverted aarch64 stubs code to conform to jdk7
    • Reverted aarch64 template interpreter code to conform to jdk7
    • Reverted aarch64 vm structs code to conform to jdk7
    • Reverted aarch64 vm version code to conform to jdk7
    • Reverted aarch64 vtable stubs code to conform to jdk7
    • Reverted assembler_aarch64.cpp/hpp to conform to jdk7
    • Reverted bytecodeInterpreter_aarch64 to conform to jdk7
    • Reverted global defs code to conform to jdk7
    • Reverted instr cache code to conform to jdk7
    • Reverted interpreter code to conform to jdk7
    • Reverted interpreter masm code to conform to jdk7
    • Reverted jni code to conform to jdk7
    • Reverted method handles code to conform to jdk7
    • Reverted native instr code to conform to jdk7
    • Reverted os_cpu/linux_aarch64 code to conform to jdk7
    • Reverted reloc info code to conform to jdk7
    • Revert Method:: etc to methodOopDesc:: etc
    • Scripts to build aarch64-x86 hybrid and aarch64 native debug images
    • Some errors revealed when building debug image
    • Temporarily disable running test_gamma
    • Tidy up allocation prefetch
    • Use correct post-increment size in repne_scanw
    • Use membar rules and delete special case volatile rules
    • Use method register to access counter increment field
    • Use movoop in C1 ic_call to keep verifier happy
    • Use os::malloc to allocate the register map.
    • Use the correct return value from the VM resolve call
    • Use TLS for ThreadLocalStorage::thread()
    • Various changes to accommodate inclusion of ppc port in icedtea7
    • Various concurrency fixes.
    • Work around weird compiler issue

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

  • PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
  • Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07

I’m transitioning to the use of a new key for signing releases over the next year. Signatures made with this key are available at:

and the new key is:

  • PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
  • Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

SHA256 checksums:

  • 5301b9a8592af2cf8e3e7a3650e5e1fe744c6d2de7f8ff78080b2eeae86a9800 icedtea-2.5.4.tar.gz
  • 379388e05eeb2076fad256c95e8045f5b83ce18f9aac4f9d3875eafe840cb6e6 icedtea-2.5.4.tar.gz.sig
  • 3d34129aa9c85f7e0cf8a90b8456a750a05951928d32ca00170dcb7b02ef5b05 icedtea-2.5.4.tar.gz.sig.ec
  • 1b50f5c42417c899e0dc831351470557c504c4e648f72cc621be9318c215ffda icedtea-2.5.4.tar.xz
  • c86eeaefb7c7b6e869c24933da07882a2779d045b1d6b05d77f36ac7a089aeb0 icedtea-2.5.4.tar.xz.sig

The checksums can be downloaded from:

A 2.5.4 ebuild for Gentoo is available.

The following people helped with these releases:

  • Andrew Dinn (AArch64 backport)
  • Andrew Hughes (all backports & bug fixes, release management)
  • Robert Lougher (JamVM build fix)
  • Xerxes Rånby (CACAO build fix)
  • Pavel Tisnovsky (executable stack issue with JamVM)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.5.4.tar.gz

or:

$ tar x -I xz -f icedtea-2.5.4.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.5.4/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.5.x series with the October 2014 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Note that alternate virtual machines (e.g. CACAO, JamVM) will be broken by this release, until such a time as they introduce support for JVM_FindClassFromCaller, a new virtual machine interface function added by S8015256

Full details of the release can be found below.

What’s New?

New in release 2.5.3 (2014-10-14)

  • Security fixes
  • Backports
    • S4963723: Implement SHA-224
    • S7044060: Need to support NSA Suite B Cryptography algorithms
    • S7122142: (ann) Race condition between isAnnotationPresent and getAnnotations
    • S7160837: DigestOutputStream does not turn off digest calculation when “close()” is called
    • S8006935: Need to take care of long secret keys in HMAC/PRF compuation
    • S8012637: Adjust CipherInputStream class to work in AEAD/GCM mode
    • S8028192: Use of PKCS11-NSS provider in FIPS mode broken
    • S8038000: java.awt.image.RasterFormatException: Incorrect scanline stride
    • S8039396: NPE when writing a class descriptor object to a custom ObjectOutputStream
    • S8042603: ‘SafepointPollOffset’ was not declared in static member function ‘static bool Arguments::check_vm_args_consistency()’
    • S8042850: Extra unused entries in ICU ScriptCodes enum
    • S8052162: REGRESSION: sun/java2d/cmm/ColorConvertOp tests fail since 7u71 b01
    • S8053963: (dc) Use DatagramChannel.receive() instead of read() in connect()
    • S8055176: 7u71 l10n resource file translation update
  • Bug fixes
    • PR1988: C++ Interpreter should no longer be used on ppc64
    • PR1989: Make jdk_generic_profile.sh handle missing programs better and be more verbose
    • PR1992, RH735336: Support retrieving proxy settings on GNOME 3.12.2
    • PR2000: Synchronise HEAD tarball paths with release branch paths
    • PR2002: Fix references to hotspot.map following PR2000
    • PR2003: –disable-system-gtk option broken by refactoring in PR1736
    • PR2009: Checksum of policy JAR files changes on every build
    • PR2014: Use version from hotspot.map to create tarball filename
    • PR2015: Update hotspot.map documentation in INSTALL
    • PR2025: LCMS_CFLAGS & LCMS_LIBS should not be used unless SYSTEM_LCMS is enabled
    • RH1015432: java-1.7.0-openjdk: Fails on PPC with StackOverflowError (revised comprehensive fix)
  • CACAO
  • AArch64 port
    • AArch64 C2 instruct for smull
    • Add frame anchor fences.
    • Add MacroAssembler::maybe_isb()
    • Add missing instruction synchronization barriers and cache flushes.
    • Add support for a few simple intrinsics
    • Add support for builtin crc32 instructions
    • Add support for Neon implementation of CRC32
    • All address constants are 48 bits in size.
    • array load must only read 32 bits
    • Define uabs(). Use it everywhere an absolute value is wanted.
    • Fast string comparison
    • Fast String.equals()
    • Fix register usage in generate_verify_oop().
    • Fix thinko in Atomic::xchg_ptr.
    • Fix typo in fsqrts
    • Improve C1 performance improvements in ic_cache checks
    • Performance improvement and ease of use changes pulled from upstream
    • Remove obsolete C1 patching code.
    • Replace hotspot jtreg test suite with tests from jdk7u
    • S8024648: 7141246 breaks Zero port
    • Save intermediate state before removing C1 patching code.
    • Unwind native AArch64 frames.
    • Use 2- and 3-instruction immediate form of movoop and mov_metadata in C2-generated code.
    • Various concurrency fixes.

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

SHA256 checksums:

  • 44df11ac8e5ace7194e7372ef169909e0dab31d6b2f6bbae9a9c33af2cc54540 icedtea-2.5.3.tar.gz
  • ac7c1ae97eef2d1c650ab7a21091f71e83a984f37a12c802c0f319f1438b0101 icedtea-2.5.3.tar.gz.sig
  • f4f2922cfec262496e935f81c1d39af66a789f69aa12d1ceee51bcca8934f1f0 icedtea-2.5.3.tar.xz
  • ed9b9cbc1237bfbf619e2cccfddf1002901371e94177a8becd85036be1ccf29a icedtea-2.5.3.tar.xz.sig

The checksums can be downloaded from:

A 2.5.3 ebuild for Gentoo is available.

The following people helped with these releases:

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.5.3.tar.gz

or:

$ tar x -I xz -f icedtea-2.5.3.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.5.3/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as a PulseAudio sound driver, the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 6 support in the 1.13.x series with the October 2014 security fixes.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Note that alternate virtual machines (e.g. CACAO, JamVM) will be broken by this release, until such a time as they introduce support for JVM_FindClassFromCaller, a new virtual machine interface function added by S8015256.

Full details of the release can be found below.

What’s New?

New in release 1.13.5 (2014-10-14)

  • Security fixes
  • Import of OpenJDK6 b33
    • OJ37: OpenJDK6-b32 cannot be built on Windows
    • OJ39: Handle fonts with the non-canonical processing flag set
    • OJ41: OpenJDK6 should be compatible with Windows SDK 7.1
    • OJ42: Remove @Override annotation on interfaces added by 2014/10/14 security fixes.
    • S6967684: httpserver using a non thread-safe SimpleDateFormat
    • S7033534: Two tests fail just against jdk7 b136
    • S7160837: DigestOutputStream does not turn off digest calculation when “close()” is called
    • S7172149: ArrayIndexOutOfBoundsException from Signature.verify
    • S8010213: Some api/javax_net/SocketFactory tests fail in 7u25 nightly build
    • S8012637: Adjust CipherInputStream class to work in AEAD/GCM mode
    • S8028192: Use of PKCS11-NSS provider in FIPS mode broken
    • S8038000: java.awt.image.RasterFormatException: Incorrect scanline stride
    • S8039396: NPE when writing a class descriptor object to a custom ObjectOutputStream
    • S8042603: ‘SafepointPollOffset’ was not declared in static member function ‘static bool Arguments::check_vm_args_consistency()’
    • S8042850: Extra unused entries in ICU ScriptCodes enum
    • S8052162: REGRESSION: sun/java2d/cmm/ColorConvertOp tests fail since 7u71 b01
    • S8053963: (dc) Use DatagramChannel.receive() instead of read() in connect()
  • Backports
    • S4963723: Implement SHA-224
    • S6578658: Request for raw RSA (NONEwithRSA) Signature support in SunMSCAPI
    • S6753664: Support SHA256 (and higher) in SunMSCAPI
    • S7033170: Cipher.getMaxAllowedKeyLength(String) throws NoSuchAlgorithmException
    • S7044060: Need to support NSA Suite B Cryptography algorithms
    • S7106773: 512 bits RSA key cannot work with SHA384 and SHA512
    • S7180907: Jarsigner -verify fails if rsa file used sha-256 with authenticated attributes
    • S8006935: Need to take care of long secret keys in HMAC/PRF compuation
    • S8017173, PR1688: XMLCipher with RSA_OAEP Key Transport algorithm can’t be instantiated
    • S8049480: Current versions of Java can’t verify jars signed and timestamped with Java 9
  • Bug fixes
    • PR1904: [REGRESSION] Bug reports now lack IcedTea version & distribution packaging information
    • PR1967: Move to new OpenJDK bug URL format

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

SHA256 checksums:

  • 7bc21b8fa532c44279591372a77a76ae5976f54ae02ea8bdcd3dd7740511f1cb icedtea6-1.13.5.tar.gz
  • daf5b5132e73091af7bdf1040ae234773fa62c4ee8600a4abfdb7b2db205ce3a icedtea6-1.13.5.tar.gz.sig
  • 3579852895dcce8dcb0277b221c5b27d57baf7e642e9cbb92c1b67d9af9e2cbb icedtea6-1.13.5.tar.xz
  • 8b5de1b8c814d9743c7531ad58e0cb1de1c40e56c7f2315ae01c45c36faa20f1 icedtea6-1.13.5.tar.xz.sig

The checksums can be downloaded from:

A 1.13.5 ebuild for Gentoo is available.

The following people helped with these releases:

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea6-1.13.5.tar.gz

or:

$ tar x -I xz -f icedtea6-1.13.5.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea6-1.13.5/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

We are pleased to announce the release of IcedTea 2.5.2, “Back in the Groovy”!

The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK.

This release updates our OpenJDK 7 support with a number of regression fixes found in the previous 2.5.1 release. Mostly notably, it includes a backport of a regression fix. With the previous release, a number of Java tools and applications, including Groovy, were broken. This release should resolve these issues.

If you find an issue with the release, please report it to our bug database under the appropriate component. Development discussion takes place on the distro-pkg-dev OpenJDK mailing list and patches are always welcome.

Full details of the release can be found below.

What’s New?

New in release 2.5.2 (2014-08-29)

  • Backports
    • S8049480: Current versions of Java can’t verify jars signed and timestamped with Java 9
    • S8051012, LP1360392: Regression in verifier for <init> method call from inside of a branch
  • Bug fixes
    • PR1903: [REGRESSION] Bug reports now lack IcedTea version & distribution packaging information
    • PR1948: Only try and symlink debuginfo if STRIP_POLICY is other than no_strip
    • PR1948: Fix indenting
    • PR1966: Move to new OpenJDK bug URL format
    • RH1015432: java-1.7.0-openjdk: Fails on PPC with StackOverflowError (revised fix for PPC32)
  • PPC & AIX port
    • Adapt AIX port to 5049299: (process) Use posix_spawn, not fork, on S10 to avoid swap exhaustion
    • Adapt aix to 8022507
    • Fix aix after 8022507: SIGSEGV at ParMarkBitMap::verify_clear()
    • S8050942: PPC64: implement template interpreter for ppc64le
    • S8050972: Concurrency problem in PcDesc cache

The tarballs can be downloaded from:

We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

These are produced using my public key. See details below.

SHA256 checksums:

  • 6e36b5922d6a30b28a3387c60cf698461f12ae6471c9deab9c30763cb3505988 icedtea-2.5.2.tar.gz
  • 77ebbd7b0c5e5878c779d04342013f9fd7e4c3ad12fa8388e556cbbe74fcce68 icedtea-2.5.2.tar.gz.sig
  • 171e1ac6a549a9b15fec30fa308c777d0ac7498cc96058c4a2bcb0b0d0b45bf0 icedtea-2.5.2.tar.xz
  • 985835869ccb2e6841ed41edf69b1d9f6aec1b3e5b4154009ca2561bbd8c01a8 icedtea-2.5.2.tar.xz.sig

The checksums can be downloaded from:

The following people helped with these releases:

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.5.2.tar.gz

or:

$ tar x -I xz -f icedtea-2.5.2.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.5.2/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!

Next Page »