January 15, 2019
The full version string for this update release is 11.0.2+9 (where "+" means "build"). The version number is 11.0.2.
JDK 11.0.2 contains IANA time zone data version 2018g. For more information, refer to Timezone Data Versions in the JRE Software.
The security baselines for the Java Runtime Environment (JRE) at the time of the release of JDK 11.0.2 are specified in the following table:
JRE Family Version | JRE Security Baseline (Full Version String) |
---|---|
11 | 11.0.2+9 |
10 | 10.0.99 |
9 | 9.0.99 |
8 | 1.8.0_201-b09 |
7 | 1.7.0_211-b07 |
6 | 1.6.0_221 |
The JDK expires whenever a new release with security vulnerability fixes becomes available. Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. This JDK (version 11.0.2) will expire with the release of the next critical patch update scheduled for April 16, 2019.
➜GTK+ 3.20 and Later Unsupported by Swing
Due to incompatible changes in the GTK+ 3 library versions 3.20 and later, the Swing GTK Look and Feel does not render some UI components when using this library. Therefore, Linux installations with versions of GTK+ 3.20 and above are not supported for use by the Swing GTK Look And Feel in this release.
See JDK-8219072
➜TLS anon and NULL Cipher Suites are Disabled
The TLS anon (anonymous) and NULL cipher suites have been added to the jdk.tls.disabledAlgorithms
security property and are now disabled by default.
See JDK-8211883
➜Linux Native Code Checks
Additional safeguards to protect against buffer overruns in native code have been enabled on Linux. If a buffer overrun is encountered the system will write the message “stack smashing detected” and the program will exit. Issues of this type should be reported to your vendor.
JDK-8196902 (not public)
➜ Enable Java Access Bridge Check Box Option in Control Panel Is Not Available with JDK 11 Installer
The Java Access Bridge checkbox in the Windows Control Panel is not available in JDK11. This registration was part of the public JRE installation. However, Java Access Bridge can still be enabled and disabled by following these steps:
%JAVAHOME%\bin\windowsaccessbridge-64.dll
to %WINDOWSHOME%\SYSTEM32
. A reboot might be required after this step.%JAVAHOME%\bin\jabswitch /enable
and %JAVAHOME%\bin\jabswitch /disable
.%WINDOWSHOME%
is the directory where Microsoft Windows is installed (for example, C:\WINDOWS
)%JAVAHOME%
is the directory where your JDK is installed (for example, C:\Program Files\Java\jdk-11
)See JDK-8208637
This release also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update.
➜ Issues fixed in 11.0.2:
# | BugId | Component | Subcomponent | Summary |
---|---|---|---|---|
1 | JDK-7017058 | client-libs | 2d | Malayalam glyph substitution is failing for Malayalam with Windows Kartika font. |
2 | JDK-8210335 | client-libs | 2d | Clipping problems with complex affine transforms: negative scaling factors or small scaling factors |
3 | JDK-8206392 | client-libs | javax.swing | [macosx] Cycling through windows (JFrames) does not work with keyboard shortcut |
4 | JDK-8209786 | core-libs | JDK12 fails to build on s390x with gcc 7.3 | |
5 | JDK-8211437 | core-libs | java.net | java.net.http.HttpClient hangs on 204 reply without Content-length 0 |
6 | JDK-8203850 | core-libs | java.net | java.net.http HTTP client should allow specifying Origin and Referer headers |
7 | JDK-8211420 | core-libs | java.net | com.sun.net.httpserver.HttpServer returns Content-length header for 204 response code |
8 | JDK-8212926 | core-libs | java.net | HttpClient does not retrieve files with large sizes over HTTP/1.1 |
9 | JDK-8209576 | core-libs | java.nio.charsets | java.nio.file.Files.writeString writes garbled UTF-16 instead of UTF-8 |
10 | JDK-8206389 | core-libs | java.util.jar | JarEntry.setCreation/LastAccessTime without setLastModifiedTime causes Invalid CEN header |
11 | JDK-8209775 | core-libs | java.util:i18n | ISO 4217 Amendment #169 Update |
12 | JDK-8208746 | core-libs | java.util:i18n | ISO 4217 Amendment #168 Update |
13 | JDK-8210153 | core-libs | java.util:i18n | localized currency symbol of VES |
14 | JDK-8210490 | core-libs | java.util:i18n | TimeZone.getDisplayName given Locale.US doesn't always honor the Locale |
15 | JDK-8212795 | core-svc | java.lang.management | ThreadInfoCompositeData.toCompositeData fails to map ThreadInfo to CompositeData |
16 | JDK-8212197 | core-svc | java.lang.management | OpenDataException thrown when constructing CompositeData for StackTraceElement |
17 | JDK-8209996 | hotspot | [PPC64] Fix JFR profiling. | |
18 | JDK-8211105 | hotspot | compiler | AArch64: Disable cos/sin and log intrinsics in jdk11u pending fix |
19 | JDK-8210497 | hotspot | compiler | [PPC64] Vector registers not saved across safepoint |
20 | JDK-8210319 | hotspot | compiler | [s390]: Use of shift operators not covered by cpp standard |
21 | JDK-8209950 | hotspot | compiler | SIGBUS in CodeHeapState::print_names() |
22 | JDK-8210355 | hotspot | compiler | Minimal and Zero non-PCH builds fail after JDK-8207343 (Automate vtable/itable stub size calculation) |
23 | JDK-8210357 | hotspot | compiler | Zero builds fail after JDK-8207343 (Automate vtable/itable stub size calculation) |
24 | JDK-8207343 | hotspot | compiler | Automate vtable/itable stub size calculation |
25 | JDK-8211375 | hotspot | compiler | Minimal VM build failures after JDK-8211251 (Default mask register for avx512 instructions) |
26 | JDK-8211272 | hotspot | compiler | x86_32 build failures after JDK-8210764 (Update avx512 implementation) |
27 | JDK-8211251 | hotspot | compiler | Default mask register for avx512 instructions |
28 | JDK-8210764 | hotspot | compiler | Update avx512 implementation |
29 | JDK-8209588 | hotspot | compiler | SIGSEGV in MethodArityHistogram() with -XX:+CountCompiledCalls |
30 | JDK-8209639 | hotspot | compiler | assert failure in coalesce.cpp: attempted to spill a non-spillable item |
31 | JDK-8211061 | hotspot | compiler | Tests fail with assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU |
32 | JDK-8211231 | hotspot | compiler | BarrierSetC1::generate_referent_check() confuses register allocator |
33 | JDK-8211856 | hotspot | compiler | [ppc, s390] ProblemList some failing tests. |
34 | JDK-8209942 | hotspot | gc | [epsilon] range function for EpsilonTLABElasticity causes compiler warning |
35 | JDK-8212177 | hotspot | gc | Epsilon alignment adjustments can overflow max TLAB size |
36 | JDK-8212005 | hotspot | gc | Epsilon elastic TLAB sizing may cause misalignment |
37 | JDK-8211768 | hotspot | jfr | [s390] Implement JFR profiling. |
38 | JDK-8210775 | hotspot | jvmti | JVM TI Spec missing copyright |
39 | JDK-8212754 | hotspot | jvmti | Build failure: undefined JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample |
40 | JDK-8211909 | hotspot | jvmti | JDWP Transport Listener: dt_socket thread crash |
41 | JDK-8211065 | hotspot | runtime | Private method check in linkResolver is incorrect |
42 | JDK-8211208 | hotspot | runtime | make AllocateHeapAt an unsupported option on AIX |
43 | JDK-8211852 | hotspot | runtime | inspect stack during error reporting |
44 | JDK-8027434 | hotspot | runtime | "-XX:OnOutOfMemoryError" uses fork instead of vfork |
45 | JDK-8211714 | hotspot | runtime | Need to update vm_version.cpp to recognise VS2017 minor versions |
46 | JDK-8210754 | hotspot | runtime | print_location is not reliable enough (printing register info) |
47 | JDK-8210964 | hotspot | runtime | add more ld preloading info to hs_error file on Linux |
48 | JDK-8209889 | hotspot | runtime | RedefineStress tests crash |
49 | JDK-8211956 | hotspot | runtime | AppCDS crashes for some uses with JRuby |
50 | JDK-8210836 | hotspot | svc-agent | Build fails with warn_unused_result in openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c |
51 | JDK-8211012 | install | uninstall | [Linux] JDK 11, warning when uninstall rpm package "warning: %postun(jdk-11-2000:11-ga.x86_64) scriptlet failed, exit status 2 |
52 | JDK-8209862 | security-libs | javax.crypto | CipherCore performance improvement |
53 | JDK-8210334 | security-libs | javax.net.ssl | TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes |
54 | JDK-8211883 | security-libs | javax.net.ssl | Disable anon and NULL cipher suites |
55 | JDK-8211806 | security-libs | javax.net.ssl | TLS 1.3 handshake server name indication is missing on a session resume |
56 | JDK-8210502 | tools | jdeps does not handle properly on analyzing a mixture of MR JARs and non-MR JARs | |
57 | JDK-8205593 | tools | javadoc(tool) | Javadoc -link makes broken links if module name matches package name |
58 | JDK-8210810 | tools | launcher | Escaped character at specific position in argument file is not handled properly |
59 | JDK-8212178 | xml | javax.xml.stream | Soft reference reclamation race in com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator |