We are pleased to announce the release of OpenJDK 7u221. The source tarball is available from:
* https://openjdk-sources.osci.io/openjdk7/openjdk7u221-b02.tar.xz The tarball is accompanied by a digital signature available at: * https://openjdk-sources.osci.io/openjdk7/openjdk7u221-b02.tar.xz.sig This is signed by our new Red Hat OpenJDK key (open...@redhat.com): PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net) Fingerprint = CA5F 11C6 CE22 644D 42C6 AC44 92EF 8D39 DC13 168F SHA256 checksums: 2f3b819285f7fdfa80bd5a7df854ec69a3655c21a862094ff68059aa57d71c15 openjdk7u221-b02.tar.xz 620bb1bc56094bdfc6e6dde67a0d4ad3597573fa4430fd5e2e330281a728c896 openjdk7u221-b02.tar.xz.sig The checksums can be downloaded from: * https://openjdk-sources.osci.io/openjdk7/openjdk7u221-b02.sha256 What's New? =========== New in OpenJDK 7u221-b02: * Security fixes - S8211936, CVE-2019-2602: Better String parsing - S8218453, CVE-2019-2684: More dynamic RMI interactions - S8219066, CVE-2019-2698: Fuzzing TrueType fonts: setCurrGlyphID() * Other changes - S8003846: Override mechanism for currency data should not require creating currency.properties in java.home - S8074350: Support ISO 4217 "Current funds codes" table (A.2) - S8129361: ISO 4217 amendment 160 - S8129822: Define "headful" jtreg keyword - S8145952: ISO 4217 amendment 161 - S8151731: Add new jtreg keywords to jdk 8 - S8164784: ISO 4217 amendment 162 - S8202088: Japanese new era implementation - S8204142: AWT hang occurs when sequenced events arrive out of sequence in multiple AppContexts - S8205432: Replace the placeholder Japanese era name - S8206120: Add test cases for lenient Japanese era parsing - S8207152: Placeholder for Japanese new era should be two characters - S8207258: Distrust TLS server certificates anchored by Symantec Root CAs - S8208656: Move java/util/Calendar/CalendarTestScripts tests into OpenJDK - S8216280: Allow later Symantec Policy distrust date for two Apple SubCAs - S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883 - S8217753: Enable HotSpot builds on 5.x Linux kernels - S8219890: [TEST_BUG] Calendar.getDisplayName() returns empty string for new Japanese Era on some locales - S8222449: freetypecheck compares versions using lexicographic comparison -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 https://keybase.io/gnu_andrew