JDK-8225748 : Use SHA-256 for javap classfile checksum
Type:Bug
Component:tools
Sub-Component:javap
Priority:P3
Status:Resolved
Resolution:Fixed
Submitted:2019-06-13
Updated:2020-06-01
Resolved:2019-06-18
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed. Resolved: Release in which this issue/RFE has been resolved. Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
javap uses MD5 as a checksum for some classfile information. Since this is just a file checksum it should not be a security issue, but it is better to use something stronger and more modern like SHA-256.