Loading...

XML

Word

Printable

Type: Bug
Resolution: Fixed
Priority: P3
Fix Version/s: 19
Affects Version/s: 7u301, 8u291, 11.0.11, 18
Component/s: security-libs
Labels:

Subcomponent:
java.security
Resolved In Build:
b06
CPU:

generic
OS:

generic
Verification:
Verified

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8281995	18.0.2	Sean Coffey	P3	Resolved	Fixed	b01
JDK-8281211	18.0.1	Sean Coffey	P3	Resolved	Fixed	b06
JDK-8281616	17.0.4-oracle	Sean Coffey	P3	Resolved	Fixed	b01
JDK-8283369	17.0.4	Goetz Lindenmaier	P3	Resolved	Fixed	b01
JDK-8285719	15.0.8	Yuri Nesterenko	P3	Resolved	Fixed	b02
JDK-8285789	13.0.12	Yuri Nesterenko	P3	Resolved	Fixed	b02
JDK-8281617	11.0.16-oracle	Sean Coffey	P3	Resolved	Fixed	b01
JDK-8283506	11.0.16	Goetz Lindenmaier	P3	Resolved	Fixed	b01
JDK-8305759	openjdk8u382	Severin Gehwolf	P3	Resolved	Fixed	b01
JDK-8282760	8u341	Sean Coffey	P3	Resolved	Fixed	b01
JDK-8283043	7u351	Sean Coffey	P3	Resolved	Fixed	b01

If a jar file is signed with multiple digest algorithms and one of the digest algorithms is treated as restricted ManifestEntryVerifier.verify(.) may incorrectly return null indicating that the jar entry has no signers.

backported by

JDK-8281211 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8281616 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8281617 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8281995 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8282760 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8283043 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8283369 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8283506 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8285719 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8285789 Correct signer logic for jars signed with multiple digest algorithms

Resolved

JDK-8305759 Correct signer logic for jars signed with multiple digest algorithms

Resolved

relates to

JDK-8273826 Correct Manifest file name and NPE checks

Closed

links to

Commit openjdk/jdk8u-dev/f1c1f969

Commit openjdk/jdk11u-dev/79c45a59

Commit openjdk/jdk13u-dev/80d7902f

Commit openjdk/jdk15u-dev/d148e266

Commit openjdk/jdk17u-dev/cbe49739

Commit openjdk/jdk18u/fbc28a70

Commit openjdk/jdk/61b89443

Review openjdk/jdk8u-dev/282

Review openjdk/jdk11u-dev/928

Review openjdk/jdk13u-dev/345

Review openjdk/jdk15u-dev/202

Review openjdk/jdk17u-dev/262

Review openjdk/jdk18u/19

Review openjdk/jdk/7056

(6 backported by, 1 relates to, 14 links to)

Assignee:: Sean Mullan

Reporter:: Sean Coffey

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Created:: 2021-12-15 04:51

Updated:: 2023-04-07 11:14

Resolved:: 2022-01-14 07:23

Details

Backports

Description

Attachments

Issue Links

Activity

People

Dates