Hello,
I would like to announce the release of OpenJDK 7u341.
The release sources are in the git repo:
https://github.com/openjdk/jdk7u
* Security fixes in this release:
JDK-8275151: Improved Object Identification
JDK-8277227: Better identification of OIDs
JDK-8277672: Better invocation handler handling
JDK-8270504: Better Xpath expression handling
JDK-8278972: Improve URL supports
JDK-8278805: Enhance BMP image loading
JDK-8278449: Improve keychain support
JDK-8269938: Enhance XML processing passes redux
JDK-8278356: Improve file creation
JDK-8282397: createTempFile method of java.io.File is failing when
called with suffix of spaces character
JDK-8282300: Throws NamingException instead of InvalidNameException
after JDK-8278972
JDK-8278008: Improve Santuario processing
JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
JDK-8272255: Completely handle MIDI files
JDK-8274221: More definite BER encodings
JDK-8284548: Invalid XPath expression causes
StringIndexOutOfBoundsException
JDK-8284920: Incorrect Token type causes XPath expression to return
empty result
* Other fixes:
JDK-8285357: Update .jcheck/conf file for 7u move to git
* Added tags:
jdk7u341-b00: the start of the update 341.
jdk7u341-b01: the proposed set of fixes.
jdk7u341-ga: the same node as jdk7u341-b01.
* Notes on some issues:
xml/jaxp:
New XML Processing Limits
========================================================
Added three new processing limits:
jdk.xml.xpathExprGrpLimit (by default 10, 0 or less means no limit)
jdk.xml.xpathExprOpLimit (by default 100, 0 or less means no limit)
jdk.xml.xpathTotalOpLimit (by default 10000, 0 or less means no limit)
The limits may be set as system properties or in jaxp.properties
file; for XSLT processor - via TransformerFactory.
core-libs/javax.naming:
Parsing of URL Strings in Built-In JNDI Providers Is More Strict
================================================================
Added three system properties to control strength of some URLs
parsing. Properties are:
com.sun.jndi.ldapURLParsing
com.sun.jndi.dnsURLParsing
com.sun.jndi.rmiURLParsing
with acceptable values "legacy", "compat", "strict".
The default is always "compat";
"legacy" would turn validation off;
"strict" may reject some URLs unless all their fragments are
explicitly supported by Uri subclass.
security-libs/java.security
Trusted Certificate Entries in macOS KeychainStore
==================================================
Starting from this release only certificates added with the system
macOS "security add-trusted-cert" command will be treated as Trusted
Certificate Entries in the macOS KeychainStore
Thanks,
Andrew
