{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "\nNew in release OpenJDK 17.0.1 (2021-10-19):\n===========================================\n\nLive versions of these release notes can be found at:\n\n  * https://builds.shipilev.net/backports-monitor/release-notes-17.0.1.txt\n\nSecurity fixes\n\n  - JDK-8263314: Enhance XML Dsig modes\n  - JDK-8265167, CVE-2021-35556: Richer Text Editors\n  - JDK-8265574: Improve handling of sheets\n  - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit\n  - JDK-8265776: Improve Stream handling for SSL\n  - JDK-8266097, CVE-2021-35561: Better hashing support\n  - JDK-8266103: Better specified spec values\n  - JDK-8266109: More Resilient Classloading\n  - JDK-8266115: More Manifest Jar Loading\n  - JDK-8266137, CVE-2021-35564: Improve Keystore integrity\n  - JDK-8266689, CVE-2021-35567: More Constrained Delegation\n  - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic\n  - JDK-8267712: Better LDAP reference processing\n  - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking\n  - JDK-8267735, CVE-2021-35586: Better BMP support\n  - JDK-8268193: Improve requests of certificates\n  - JDK-8268199: Correct certificate requests\n  - JDK-8268205: Enhance DTLS client handshake\n  - JDK-8268500: Better specified ParameterSpecs\n  - JDK-8268506: More Manifest Digests\n  - JDK-8269618, CVE-2021-35603: Better session identification\n  - JDK-8269624: Enhance method selection support\n  - JDK-8270398: Enhance canonicalization\n  - JDK-8270404: Better canonicalization\n\nOther changes\n\n  - JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021\n  - JDK-8243543: jtreg test security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java fails\n  - JDK-8248899: security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked\n  - JDK-8261088: Repeatable annotations without @Target cannot have containers that target module declarations\n  - JDK-8262731: [macOS] Exception from \"Printable.print\" is swallowed during \"PrinterJob.print\"\n  - JDK-8263531: Remove unused buffer int\n  - JDK-8266182: Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java\n  - JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type\n  - JDK-8267666: Add option to jcmd GC.heap_dump to use existing file\n  - JDK-8268019: C2: assert(no_dead_loop) failed: dead loop detected\n  - JDK-8268261: C2: assert(n != __null) failed: Bad immediate dominator info.\n  - JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance\n  - JDK-8268963: [IR Framework] Some default regexes matching on PrintOptoAssembly in IRNode.java do not work on all platforms\n  - JDK-8269297: Bump version numbers for JDK 17.0.1\n  - JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should be more resilient\n  - JDK-8269574: C2: Avoid redundant uncommon traps in GraphKit::builtin_throw() for JVMTI exception events\n  - JDK-8269763: The JEditorPane is blank after JDK-8265167\n  - JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers\n  - JDK-8269882: stack-use-after-scope in NewObjectA\n  - JDK-8269897: Shenandoah: Resolve UNKNOWN access strength, where possible\n  - JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status\n  - JDK-8269993: [Test]: java/net/httpclient/DigestEchoClientSSL.java contains redundant @run tags\n  - JDK-8270094: Shenandoah: Provide human-readable labels for test configurations\n  - JDK-8270096: Shenandoah: Optimize gc/shenandoah/TestRefprocSanity.java for interpreter mode\n  - JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails with \"Guard against surprises\" assert\n  - JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup\n  - JDK-8270280: security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java  OCSP response error\n  - JDK-8270344: Session resumption errors\n  - JDK-8271203: C2: assert(iff->Opcode() == Op_If || iff->Opcode() == Op_CountedLoopEnd || iff->Opcode() == Op_RangeCheck) failed: Check this code when new subtype is added\n  - JDK-8271276: C2: Wrong JVM state used for receiver null check\n  - JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4\n  - JDK-8271589: fatal error with variable shift count integer rotate operation.\n  - JDK-8271723: Unproblemlist runtime/InvocationTests/invokevirtualTests.java\n  - JDK-8271730: Client authentication using RSASSA-PSS fails after correct certificate requests\n  - JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load barrier\n  - JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon\n  - JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj\n  - JDK-8272326: java/util/Random/RandomTestMoments.java had two Gaussian fails\n  - JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz after JDK-8255790\n  - JDK-8272472: StackGuardPages test doesn't build with glibc 2.34\n  - JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182\n  - JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used\n  - JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848\n  - JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled\n  - JDK-8272806: [macOS] \"Apple AWT Internal Exception\" when input method is changed\n  - JDK-8273358: macOS Monterey does not have the font Times needed by Serif\n\nNotes on individual issues:\n===========================\n\nsecurity-libs/java.security:\n\nJDK-8271434: Removed IdenTrust Root Certificate\n----------------------------------------------------------------------\n\nThe following root certificate from IdenTrust has been removed from\nthe `cacerts` keystore:\n\nAlias Name: identrustdstx3 [jdk]\n\nDistinguished Name: CN=DST Root CA X3, O=Digital Signature Trust Co.\n", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "reboot", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": false, "date_submitted": "2021-11-10 11:41:00", "date_modified": "2021-11-10 11:44:01", "date_approved": null, "date_testing": "2021-11-11 02:23:19", "date_stable": "2021-11-19 00:37:37", "alias": "FEDORA-EPEL-2021-a21f8fb6c8", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2021-11-19 00:37:37", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2021-a21f8fb6c8", "title": "java-latest-openjdk-17.0.1.0.12-3.rolling.el8", "version_hash": "f235d21a3f7650d3d3c30c34d3ce69d50a7eba5f", "release": {"name": "EPEL-8", "long_name": "Fedora EPEL 8", "version": "8", "id_prefix": "FEDORA-EPEL", "branch": "epel8", "dist_tag": "epel8", "stable_tag": "epel8", "testing_tag": "epel8-testing", "candidate_tag": "epel8-testing-candidate", "pending_signing_tag": "epel8-signing-pending", "pending_testing_tag": "epel8-testing-pending", "pending_stable_tag": "epel8-pending", "override_tag": "epel8-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "pmikova", "email": "pmikova@redhat.com", "id": 3048, "avatar": "https://seccdn.libravatar.org/avatar/7025b79865faa9f64db65d4017277a99b33c75004a03ae9760e1a6e346974bc2?s=24&d=retro", "openid": "pmikova.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "fedora-ci-users"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by pmikova. ", "timestamp": "2021-11-10 11:41:00", "update_id": 353591, "user_id": 91, "id": 2279491, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-11-10 11:41:00", "update_id": 353591, "user_id": 91, "id": 2279492, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "pmikova edited this update.", "timestamp": "2021-11-10 11:43:25", "update_id": 353591, "user_id": 91, "id": 2279497, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "pmikova edited this update.", "timestamp": "2021-11-10 11:44:00", "update_id": 353591, "user_id": 91, "id": 2279498, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-11-11 02:23:25", "update_id": 353591, "user_id": 91, "id": 2280747, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2021-11-18 02:24:45", "update_id": 353591, "user_id": 91, "id": 2286823, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2021-11-19 00:37:45", "update_id": 353591, "user_id": 91, "id": 2287573, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "java-latest-openjdk-17.0.1.0.12-3.rolling.el8", "signed": true, "release_id": 34, "type": "rpm", "epoch": 1}], "bugs": [], "updateid": "FEDORA-EPEL-2021-a21f8fb6c8", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}