Java Development Kit 歷史舊版本 Page3

更新時間：2022-01-19
更新細節：

What's new in this version:

- Jordan now starts DST on February's last Thursday.
- Samoa no longer observes DST
- Merge more location-based Zones whose timestamps agree since 1970
- Move some backward-compatibility links to 'backward'
- Rename Pacific/Enderbury to Pacific/Kanton
- Correct many pre-1993 transitions in Malawi, Portugal, etc
- zic now creates each output file or link atomically
- zic -L no longer omits the POSIX TZ string in its output
- zic fixes for truncation and leap second table expiration
- zic now follows POSIX for TZ strings using all-year DST
- Fix some localtime crashes and bugs in obscure cases
- zdump -v now outputs more-useful boundary cases
- tzfile.5 better matches a draft successor to RFC 8536
- A new file SECURITY
- Revert most 2021b changes to 'backward'
- Fix 'zic -b fat' bug in pre-1970 32-bit data
- Fix two Link line typos
- Distribute SECURITY file
Keeping the JDK up to Date:
- Oracle recommends that the JDK is updated with each Critical Patch Update. In order to determine if a release is the latest, the Security Baseline page can be used to determine which is the latest version for each release family.
- Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. It is not recommended that this JDK (version 17.0.2) be used after the next critical patch update scheduled for April 19, 2022.

Removed Features and Options:
- security-libs/java.security
- Removed Google's GlobalSign Root Certificate

The following root certificate from Google has been removed from the cacerts keystore:
- alias name "globalsignr2ca [jdk]"
- Distinguished Name: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2

更新時間：2022-01-19
更新細節：

What's new in this version:

Added:
- added Portuguese of Portugal on Plus UI (by JNylson, isaak654, mpheath)
- added "BreakoutProcess=program.exe", with this option selected applications can be started unboxed from within a box
- the program image must be located outside the sandbox for this to work
- if another sandbox has "ForceProcess=program.exe" configured, it will capture the process
- use case: set up a box with a Web browser forced, when another box opens a website, this will happen in the dedicated browser box
- Note: "BreakoutFolder=somepath" is also available
- added silent uninstall switch /remove /S for Classic installer

Changed:
- The filename "sandman_pt" was changed to "sandman_pt_BR" (Brazilian Portuguese)
- The filename "sandman_ua" was changed to "sandman_uk" (Ukrainian)
- Note: Translators are encouraged to follow the Localization notes and tips before creating a new pull request
- updated Firefox update blocker

Fixed:
- issue with opening all file access OpenFilePath=*- issue with opening network shares
- possible upgrade issue with Classic installer 130c43a
- minor issues with Classic installer
- issue with Ldr_FixImagePath_2
- when using "Run Sandboxed" with SandMan UI and the UI is off, it wil stay off
- issue with Util_GetProcessPidByName that should resolve the driver sometimes failing to start at boot
- SandMan will now run in background like SbieCtrl when starting a boxed process post506
- taskbar not showing with persistent box border in full screen post474
- box border not spanning across multiple monitors
- issues with border when using DPI scaling
- DPI issues with Qt
- issue with bright flashing on window creation when in dark mode
- issues with the PortableRootDir setting
- issue with the settings window crashing when the driver was not connected
- DPI issues with Finder Tool
- another issue with reused process IDs
- issue introduced in 1.0.6 related to SeAccessCheckByType

更新時間：2022-01-17
更新細節：

What's new in this version:

- Added support for importing from CSV files created by Investment Account Manager (IAM)
- Enhanced the Schwab CSV file import to support the “Pr Yr Cash Dividend” transaction type
- When rebuilding a Portfolio’s Prices view from the transactions, keep any overridden values (last, target, etc) from the original items in the newly created items
- Optimizations for large CSV/QIF/OFX transaction imports
- Enhanced the service providing Sector/Industry data
- Adjusted OFX imports from Fidelity for their new timezone zone changes
- Fixed an issue with custom technical indicators when using small parameter values
- Fix for an issue where it appeared fields in the Back-in-Time report could be edited (they can’t)
- Fixed an issue with the BuyExp column calculation for multi-lot portfolio items
- Internal optimizations

更新時間：2022-01-08
更新細節：

What's new in this version:

Added:
- added experimental option "CreateToken=y" to create a new token instead of repurposing an existing one
- added option "DisableRTBlacklist=y" allowing to disable the hardcoded runtime class blacklist
- added new template "DeviceSecurity" to lock down access to device drivers on the system
- Note: This template requires RuleSpecificity being available to work properly
- added option to set a custom ini editor in the Plus UI
- added option "LingerLeniency=n" to solve issue

Changed:
- reworked syscall invocation code in the driver
- Win32k hooking is now compatible with HVCI #1483

Fixed:
- memory leak in driver (conf_user.c)
- issue with file renaming in open paths introduced in 1.0.6
- issue causing Chromium browsers not closing properly
- issue with start.exe
- SandMan issue with reused process IDs
- KmdUtil sometimes not properly terminating the driver

Removed:
- removed OpenToken as it is only a shorthand for UnrestrictedToken=y and UnfilteredToken=y set together

更新時間：2021-12-26
更新細節：

What's new in this version:

Added:
- sandbox top level exception handler to create crash dumps
- it can be enabled per process or globally using "EnableMiniDump=process.exe,y" or "EnableMiniDump=y" respectively
- the dump flags can be set as hex with "MiniDumpFlags=0xAABBCCDD"
- a preselected flag set for a verbose dump can be set with "MiniDumpFlags=Extended"
- Note: created dump files are located at: C:Sandbox\%SANDBOX%
- added template support for Osiris and Slimjet browsers

Changed:
- improved SbieDll initialization a bit
- doubled size of Name_Buffer_Depth
- improved text filter in the templates view

Fixed:
- issue with forced process display
- crash issue with GetClassName
- minor UI issue
- UI language preset issue
- grouping issues in SandMan UI
- issue with EnableWin32kHooks

更新時間：2021-12-07
更新細節：

What's new in this version:

Added:
- added checkboxes to most major box options lists
- added SumatraPDF templates

Changed:
- rolled back change to "OpenClsid=..." handling
- made all major lists in the box options editable

Fixed:
- fixed issue with read only paths introduced in 1.0.0
- fixed BSOD issue introduced in the 1.0.0 build
- fixed multiple BITS notifications while running sandboxed Chromium browsersc
- fixed executables selection for "Run Menu" entries
- fixed SetCursorPos and ClipCursor ignoring DPI awareness

Removed:
- removed Virtual Desktop Manager template

更新時間：2021-11-17
更新細節：

What's new in this version:

Added:
- added Privacy enhanced mode, sandboxes with "UsePrivacyMode=y" will not allow read access to locations containing user data
- all locations except generic Windows system paths will need to be opened explicitly for read and/or write access
- using "NormalFilePath=...", "NormalKeyPath=...", "NormalIpcPath=..." allows to open locations to be readable and sandboxed
- added new "App Compartment" mode of operation, it's enabled by adding "NoSecurityIsolation=y" to the box configuration
- in this mode, security is traded in for compatibility, it should not be used for untrusted applications
- note: in this mode, file and registry filtering are still in place, hence processes run without administrative privileges
- it is reasonably safe, all filtering can be disabled with "NoSecurityFiltering=y"
- added experimental use of ObRegisterCallbacks to filter object creation and duplication
- this filtering is independent from the regular SbieDrv's syscall-based filtering, hence it also applies to App Compartments
- with it enabled, an application running in a compartment will not be able to manipulate processes running outside the sandbox
- Note: this feature improves the security of unisolated App Compartment boxes
- to enable this feature, set "EnableObjectFiltering=y" in the global section and reload the driver
- when globally activated, the filtering can be disabled for individual boxes with "DisableObjectFilter=y"
- added "DontOpenForBoxed=n", this option disables the discrimination of boxed processes for open file and open key directives
- this behaviour does not really improve security anyways, but may be annoying, also app compartments always disable this
- added setting to entirely open access to the COM infrastructure

Changed:
- reworked the resource access path matching mechanism to optionally apply more specific rules over less specific ones
- for example "OpenFilePath=C:UserMeAppDataFirefox takes precedence over "WriteFilePath=C:UserMe"
- to enable this new behaviour, add "UseRuleSpecificity=y" to your Sandboxie.ini, this behaviour is always enabled in Privacy enhanced mode
- added "NormalFilePath=..." to restore default Sandboxie behaviour on a given path
- added "OpenConfPath=...", which similarly to "OpenPipePath=..." is a "OpenKeyPath=..." variant which applies to executables located in the sandbox
- removed option to copy a box during creation, instead the box context menu offers a duplication option
- reworked the box creation dialog to offer new box types

Fixed:
- SBIE1401 notification during Sandboxie Plus uninstall
- memory leak in driver handling FLT_FILE_NAME_INFORMATION

更新時間：2021-11-09
更新細節：

更新時間：2021-11-02
更新細節：

What's new in this version:

Added:
- checkbox if the user wants SandMan.exe to be started after installation
- template for Windows 10 virtual desktop manager

Changed:
- "OpenClsid=..." is no longer restricted to CLSCTX_LOCAL_SERVER execution contexts only
- -- this allows to run objects with the CLSCTX_INPROC_SERVER flag in the COM helper service
- in the trace view, now multiple types can be selected at once
- a few Plus UI entries were made translatable
- changed default "terminate all boxed processes" key to Shift+Pause

Fixed:
- ini writing issue with SbieCtrl and the new ini handling mechanism
- issue with trace log filtering
- space issue about German language on Plus installer
- restored Waterfox phishing template entries with a proper fix

更新時間：2021-10-25
更新細節：

What's new in this version:

Added:
- added explicit lines on Plus installer to delete empty shell registry keys at uninstall time

Fixed:
- template sections not showing in editor
- autodelete box content broken in the previous build
- crash in "Browse Content" window
- issue with icon resolution on Windows 7
- invalid "No Inet" status in the status column
- Windows Explorer search box not working
- Waterfox phishing template
- issue with Chinese translation files on Plus installer
- autorun registry key path on Plus installer
- memory corruption in SbieSvc.exe