Blame SOURCES/NEWS

2a265a
Key:
2a265a
2a265a
JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X
2a265a
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
2a265a
c3e128
New in release OpenJDK 11.0.10 (2021-01-19):
c3e128
=============================================
c3e128
Live versions of these release notes can be found at:
c3e128
  * https://bitly.com/openjdk11010
c3e128
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt
c3e128
49ab4b
* Security fixes
49ab4b
  - JDK-8247619: Improve Direct Buffering of Characters
c3e128
* Other changes
49ab4b
  - JDK-6722928: Support SSPI as a native GSS-API provider
c3e128
  - JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
c3e128
  - JDK-8152332: [macosx] JFileChooser cannot be serialized on Mac OS X
c3e128
  - JDK-8161684: [testconf] Add VerifyOops' testing into compiler tiers
49ab4b
  - JDK-8171279: Support X25519 and X448 in TLS
49ab4b
  - JDK-8173361: various crashes in JvmtiExport::post_compiled_method_load
49ab4b
  - JDK-8173658: JvmtiExport::post_class_unload() is broken for non-JavaThread initiators
c3e128
  - JDK-8191006: hsdis disassembler plugin does not compile with binutils 2.29+
49ab4b
  - JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
c3e128
  - JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode
c3e128
  - JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
c3e128
  - JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
c3e128
  - JDK-8208483: Add 5 JNDI tests to com/sun/jndi/dns/FactoryTests/
c3e128
  - JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
c3e128
  - JDK-8208665: Amend cross-compilation docs with qemu-debootstrap recipe
c3e128
  - JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
c3e128
  - JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
49ab4b
  - JDK-8211450: UndetVar::dup is not copying the kind field to the duplicated instance
49ab4b
  - JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL) failed: resolving NULL _value"
c3e128
  - JDK-8212226: SurfaceManager throws "Invalid Image variant" for MultiResolutionImage (Windows)
c3e128
  - JDK-8213400: Support choosing group name in keytool keypair generation
c3e128
  - JDK-8213535: Windows HiDPI html lightweight tooltips are truncated
c3e128
  - JDK-8213698: Improve devkit creation and add support for linux/ppc64/ppc64le/s390x
49ab4b
  - JDK-8214025: assert(t->singleton()) failed: must be a constant when ScavengeRootsInCode < 2
49ab4b
  - JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java fails because of missing UnlockDiagnosticVMOptions
49ab4b
  - JDK-8214787: Zero builds fail with "undefined JavaThread::thread_state()"
49ab4b
  - JDK-8215583: Exclude runtime/handshake/HandshakeWalkSuspendExitTest.java
c3e128
  - JDK-8216012: Infinite loop in RSA KeyPairGenerator
c3e128
  - JDK-8216324: GetClassMethods is confused by the presence of default methods in super interfaces
c3e128
  - JDK-8217429: WebSocket over authenticating proxy fails to send Upgrade headers
c3e128
  - JDK-8217976: test/jdk/java/net/httpclient/websocket/WebSocketProxyTest.java fails intermittently
49ab4b
  - JDK-8218021: Have jarsigner preserve posix permission attributes
49ab4b
  - JDK-8218287: jshell tool: input behavior unstable after 12-ea+24 on Windows
c3e128
  - JDK-8218851: JVM crash in custom classloader stress test, JDK 12 & 13
c3e128
  - JDK-8220420: Cleanup c1_LinearScan
49ab4b
  - JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad events to wrong jvmtiEnv
c3e128
  - JDK-8222286: Fix for JDK-8213419 is broken on s390
49ab4b
  - JDK-8222527: HttpClient doesn't send HOST header when tunelling HTTP/1.1 through http proxy
c3e128
  - JDK-8222533: jtreg test jdk/internal/platform/cgroup/TestCgroupMetrics.java fails on SLES12.3 linux ppc64le machine
c3e128
  - JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails with exitValue = 137
c3e128
  - JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/tc02t001/TestDescription.java failed
49ab4b
  - JDK-8224650: Add tests to support X25519 and X448 in TLS
49ab4b
  - JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs
c3e128
  - JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash during initialization on Windows platforms
49ab4b
  - JDK-8225687: Newly added sspi.cpp in JDK-6722928 still contains some small errors
c3e128
  - JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100
49ab4b
  - JDK-8227275: Within native OOM error handling, assertions may hang the process
c3e128
  - JDK-8227647: [Graal] Test8009761.java fails due to "RuntimeException: static java.lang.Object compiler.uncommontrap.Test8009761.m3(boolean,boolean) not compiled"
49ab4b
  - JDK-8229495: SIGILL in C2 generated OSR compilation
49ab4b
  - JDK-8230910: libsspi_bridge does not build on Windows 32bit
c3e128
  - JDK-8232114: JVM crashed at imjpapi.dll in native code
c3e128
  - JDK-8234147: Avoid looking up standard charsets in core libraries
49ab4b
  - JDK-8234393: [macos] printing ignores printer tray
49ab4b
  - JDK-8234863: Increase default value of MaxInlineLevel
49ab4b
  - JDK-8235218: Minimal VM is broken after JDK-8173361
49ab4b
  - JDK-8235456: Minimal VM is broken after JDK-8212160
49ab4b
  - JDK-8235829: graal crashes with Zombie.java test
49ab4b
  - JDK-8236124: Minimal VM slowdebug build failed after JDK-8212160
c3e128
  - JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
c3e128
  - JDK-8236944: The legVecZ operand should be limited to zmm0-zmm15 registers
c3e128
  - JDK-8237186: Fix typo in copyright header of java/io/Reader/TransferTo.java
c3e128
  - JDK-8237499: JFR: Include stack trace in the ThreadStart event
c3e128
  - JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
c3e128
  - JDK-8237524: AArch64: String.compareTo() may return incorrect result
c3e128
  - JDK-8237950: C2 compilation fails with "Live Node limit exceeded limit" during ConvI2L::Ideal optimization
49ab4b
  - JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read
c3e128
  - JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test
c3e128
  - JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails -XX:+VerifyOops with "verify_oop: rsi: broken oop"
49ab4b
  - JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&)
c3e128
  - JDK-8239886: Minimal VM build fails after JDK-8237499
c3e128
  - JDK-8240633: Memory leaks in the implementations of FileChooserUI
c3e128
  - JDK-8240690: Race condition between EDT and BasicDirectoryModel.FilesLoader.run0()
c3e128
  - JDK-8241234: Unify monitor enter/exit runtime entries.
c3e128
  - JDK-8241311: Move some charset mapping tests from closed to open
c3e128
  - JDK-8241797: Add some tests to the problem list
c3e128
  - JDK-8242029: AArch64: skip G1 array copy pre-barrier if marking not active
c3e128
  - JDK-8242335: Additional Tests for RSASSA-PSS
c3e128
  - JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker
c3e128
  - JDK-8242614: cleanup duplicated test ldap server in some com/sun/jndi/ldap/ tests
c3e128
  - JDK-8242846: Bring back test/jdk/tools/jlink/plugins/OrderResourcesPluginTest.java
c3e128
  - JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
c3e128
  - JDK-8243290: Improve diagnostic messages for class verification and redefinition failures
49ab4b
  - JDK-8243488: Add tests for set/get SendBufferSize and getReceiveBufferSize in DatagramSocket
49ab4b
  - JDK-8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA
c3e128
  - JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test uses wrong class
c3e128
  - JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java test misses -version
c3e128
  - JDK-8244142: some hotspot/runtime tests don't check exit code of forked JVM
c3e128
  - JDK-8244278: Excessive code cache flushes and sweeps
49ab4b
  - JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/Test8237524.java fails with --illegal-access=deny
49ab4b
  - JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building with Xcode 11
c3e128
  - JDK-8244819: hsdis does not compile with binutils 2.34+
49ab4b
  - JDK-8245051: c1 is broken if it is compiled by gcc without -fno-lifetime-dse
49ab4b
  - JDK-8245168: jlink should not be treated as a "small" tool
c3e128
  - JDK-8245400: Upgrade to LittleCMS 2.11
c3e128
  - JDK-8246381: VM crashes with "Current BasicObjectLock* below than low_mark"
c3e128
  - JDK-8246434: Threads::print_on_error assumes that the heap has been set up
c3e128
  - JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480
c3e128
  - JDK-8247201: Print potential pointer value of readable stack memory in hs_err file
c3e128
  - JDK-8247763: assert(outer->outcnt() == 2) failed: 'only phis' failure in LoopNode::verify_strip_mined()
c3e128
  - JDK-8247867: Upgrade to freetype 2.10.2
c3e128
  - JDK-8248190: Enable Power10 system and implement new byte-reverse instructions
c3e128
  - JDK-8248226: TestCloneAccessStressGCM fails with -XX:-ReduceBulkZeroing
c3e128
  - JDK-8248347: windows build broken by JDK-8243114
c3e128
  - JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
c3e128
  - JDK-8248552: C2 crashes with SIGFPE due to division by zero
c3e128
  - JDK-8248596: [TESTBUG] compiler/loopopts/PartialPeelingUnswitch.java times out with Graal enabled
c3e128
  - JDK-8248745: Add jarsigner and keytool tests for restricted algorithms
c3e128
  - JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
c3e128
  - JDK-8248845: AArch64: stack corruption after spilling vector register
c3e128
  - JDK-8249176: Update GlobalSignR6CA test certificates
c3e128
  - JDK-8249183: JVM crash in "AwtFrame::WmSize" method
c3e128
  - JDK-8249192: MonitorInfo stores raw oops across safepoints
c3e128
  - JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions allowed
c3e128
  - JDK-8249603: C1: assert(has_error == false) failed: register allocation invalid
c3e128
  - JDK-8249605: C2: assert(no_dead_loop) failed: dead loop detected
c3e128
  - JDK-8249607: C2: assert(!had_error) failed: bad dominance
c3e128
  - JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint
c3e128
  - JDK-8249672: Include microcode revision in features_string on x86
49ab4b
  - JDK-8249748: gtest silently ignores bad jvm arguments
c3e128
  - JDK-8249821: Separate libharfbuzz from libfontmanager
c3e128
  - JDK-8250598: Hyper-V is detected in spite of running on host OS
c3e128
  - JDK-8250605: Linux x86_32 builds fail after JDK-8249821
49ab4b
  - JDK-8250636: iso8601_time returns incorrect offset part on MacOS
c3e128
  - JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY
c3e128
  - JDK-8250772: Test com/sun/jndi/ldap/NamingExceptionMessageTest.java fails intermittently with javax.naming.ServiceUnavailableException
49ab4b
  - JDK-8250825: C2 crashes with assert(field != __null) failed: missing field
c3e128
  - JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz
c3e128
  - JDK-8250928: JFR: Improve hash algorithm for stack traces
49ab4b
  - JDK-8250968: Symlinks attributes not preserved when using jarsigner on zip files
49ab4b
  - JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
c3e128
  - JDK-8251118: BiasedLocking::preserve_marks should not have a HandleMark
c3e128
  - JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java failed due to timeout
49ab4b
  - JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes target VM
49ab4b
  - JDK-8251365: Build failure on AIX after 8250636
c3e128
  - JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
c3e128
  - JDK-8251456: [TESTBUG] compiler/vectorization/TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
c3e128
  - JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
49ab4b
  - JDK-8251535: Partial peeling at unsigned test adds incorrect loop exit check
c3e128
  - JDK-8251949: ZGC: Set explicit heap size for compiler/gcbarriers tests
c3e128
  - JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9)
c3e128
  - JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
c3e128
  - JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
c3e128
  - JDK-8252497: Incorrect numeric currency code for ROL
c3e128
  - JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
49ab4b
  - JDK-8252679: Two windows specific FileDIalog tests may fail on some Windows_Server_2016_Standard
c3e128
  - JDK-8252696: Loop unswitching may cause out of bound array load to be executed
c3e128
  - JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
49ab4b
  - JDK-8253219: Epsilon: clean up unnecessary includes
c3e128
  - JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
c3e128
  - JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
49ab4b
  - JDK-8253269: The CheckCommonColors test should provide more info on failure
c3e128
  - JDK-8253284: Zero OrderAccess barrier mappings are incorrect
c3e128
  - JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
c3e128
  - JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
c3e128
  - JDK-8253791: Issue with useAppleColor check in CSystemColors.m
49ab4b
  - JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
c3e128
  - JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
49ab4b
  - JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
c3e128
  - JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp
c3e128
  - JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
c3e128
  - JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
c3e128
  - JDK-8254190: [s390] interpreter misses exception check after calling monitorenter
c3e128
  - JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
49ab4b
  - JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
49ab4b
  - JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
49ab4b
  - JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
49ab4b
  - JDK-8255065: Zero: accessor_entry misses the IRIW case
49ab4b
  - JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
49ab4b
  - JDK-8255269: Unsigned overflow in g1Policy.cpp
49ab4b
  - JDK-8255365: Problem list failing client manual tests
49ab4b
  - JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
49ab4b
  - JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
49ab4b
  - JDK-8255550: x86: Assembler::cmpq(Address dst, Register src) encoding is incorrect
49ab4b
  - JDK-8255603: Memory/Performance regression after JDK-8210985
49ab4b
  - JDK-8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback
49ab4b
  - JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/StreamFlush.java
49ab4b
  - JDK-8256427: Test com/sun/jndi/dns/ConfigTests/PortUnreachable.java does not work on AIX
49ab4b
  - JDK-8256452: Integrate missing part of JDK-8232370 to 11u
49ab4b
  - JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/libOverpassMethods.c fails to compile on gcc 4.4.x
49ab4b
  - JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to -Wl,-z,defs
49ab4b
  - JDK-8256618: Zero: Linux x86_32 build still fails
49ab4b
  - JDK-8256736: Zero: GTest tests fail with "unsuppported vm variant"
49ab4b
  - JDK-8256809: Annotation processing causes NPE during flow analysis
49ab4b
  - JDK-8257181: s390x builds are very noisy with gc-sections messages
49ab4b
  - JDK-8257242: [macOS] Java app crashes while switching input methods
49ab4b
  - JDK-8257545: SunJSSE FIPS regression in key exchange after JDK-8171279 11u backport
49ab4b
  - JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false
49ab4b
  - JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays
49ab4b
  - JDK-8258630: Add expiry exception for QuoVadis root certificate
c3e128
c3e128
Notes on individual issues:
c3e128
===========================
c3e128
c3e128
security-libs/java.security:
c3e128
c3e128
JDK-8213821: -groupname Option Added to keytool Key Pair Generation
c3e128
===================================================================
c3e128
A new `-groupname` option has been added to `keytool -genkeypair` so
c3e128
that a user can specify a named group when generating a key pair. For
c3e128
example, `keytool -genkeypair -keyalg EC -groupname secp384r1` will
c3e128
generate an EC key pair by using the `secp384r1` curve. Because there
c3e128
might be multiple curves with the same size, using the `-groupname`
c3e128
option is preferred over the `-keysize` option.
c3e128
49ab4b
JDK-8248263: jarsigner Preserves POSIX File Permission and symlink Attributes
49ab4b
=============================================================================
49ab4b
When signing a file that contains POSIX file permission or symlink
49ab4b
attributes, `jarsigner` now preserves these attributes in the newly
49ab4b
signed file but warns that these attributes are unsigned and not
49ab4b
protected by the signature. The same warning is printed during the
49ab4b
`jarsigner -verify` operation for such files.
49ab4b
49ab4b
Note that the `jar` tool does not read/write these attributes. This
49ab4b
change is more visible to tools like `unzip` where these attributes
49ab4b
are preserved.
49ab4b
49ab4b
security-libs/javax.net.ssl:
49ab4b
49ab4b
JDK-8225764:  Support for X25519 and X448 in TLS
49ab4b
================================================
49ab4b
49ab4b
The named elliptic curve groups `x25519` and `x448` are now available
49ab4b
for JSSE key agreement in TLS versions 1.0 to 1.3, with `x25519` being
49ab4b
the most preferred of the default enabled named groups.  The default
49ab4b
ordered list is now:
49ab4b
49ab4b
* x25519
49ab4b
* secp256r1
49ab4b
* secp384r1
49ab4b
* secp521r1
49ab4b
* x448
49ab4b
* secp256k1
49ab4b
* ffdhe2048
49ab4b
* ffdhe3072
49ab4b
* ffdhe4096
49ab4b
* ffdhe6144
49ab4b
* ffdhe8192
49ab4b
49ab4b
The default list can be overridden using the system property *`jdk.tls.namedGroups`*.
49ab4b
49ab4b
security-libs/org.ietf.jgss:
49ab4b
49ab4b
JDK-8214079: Added a Default Native GSS-API Library on Windows
49ab4b
==============================================================
49ab4b
A native GSS-API library has been added to JDK on the Windows
49ab4b
platform. The library is client-side only and uses the default
49ab4b
credentials. It will be loaded when the `sun.security.jgss.native`
49ab4b
system property is set to "true". A user can still load a third-party
49ab4b
native GSS-API library by setting the system property
49ab4b
`sun.security.jgss.lib` to its path.
49ab4b
c3e128
New in release OpenJDK 11.0.9.1 (2020-10-20):
c3e128
=============================================
c3e128
Live versions of these release notes can be found at:
c3e128
  * https://bitly.com/openjdk11091
c3e128
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.1.txt
c3e128
c3e128
* Regression fixes
c3e128
  - JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
c3e128
2a959b
New in release OpenJDK 11.0.9 (2020-10-20):
2a959b
===========================================
2a959b
Live versions of these release notes can be found at:
2a959b
  * https://bitly.com/openjdk1109
2a959b
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt
2a959b
2a959b
* Security fixes
2a959b
  - JDK-8233624: Enhance JNI linkage
2a959b
  - JDK-8236196: Improve string pooling
2a959b
  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
2a959b
  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
2a959b
  - JDK-8237995, CVE-2020-14782: Enhance certificate processing
2a959b
  - JDK-8240124: Better VM Interning
2a959b
  - JDK-8241114, CVE-2020-14792: Better range handling
2a959b
  - JDK-8242680, CVE-2020-14796: Improved URI Support
2a959b
  - JDK-8242685, CVE-2020-14797: Better Path Validation
2a959b
  - JDK-8242695, CVE-2020-14798: Enhanced buffer support
2a959b
  - JDK-8243302: Advanced class supports
2a959b
  - JDK-8244136, CVE-2020-14803: Improved Buffer supports
2a959b
  - JDK-8244479: Further constrain certificates
2a959b
  - JDK-8244955: Additional Fix for JDK-8240124
2a959b
  - JDK-8245407: Enhance zoning of times
2a959b
  - JDK-8245412: Better class definitions
2a959b
  - JDK-8245417: Improve certificate chain handling
2a959b
  - JDK-8248574: Improve jpeg processing
2a959b
  - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
2a959b
  - JDK-8253019: Enhanced JPEG decoding
2a959b
* Other changes
2a959b
  - JDK-6532025: GIF reader throws misleading exception with truncated images
2a959b
  - JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/PDialogTest.java needs update by removing a infinite loop
2a959b
  - JDK-8022535: [TEST BUG] javax/swing/text/html/parser/Test8017492.java fails
2a959b
  - JDK-8062947: Fix exception message to correctly represent LDAP connection failure
2a959b
  - JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
2a959b
  - JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/CloseServerSocket.java fails intermittently with Address already in use
2a959b
  - JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect
2a959b
  - JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider
2a959b
  - JDK-8172404: Tools should warn if weak algorithms are used before restricting them
2a959b
  - JDK-8193367: Annotated type variable bounds crash javac
2a959b
  - JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset
2a959b
  - JDK-8203026: java.rmi.NoSuchObjectException: no such object in table
2a959b
  - JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called
2a959b
  - JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass
2a959b
  - JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout
2a959b
  - JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java
2a959b
  - JDK-8204963: javax.swing.border.TitledBorder has a memory leak
2a959b
  - JDK-8204994: SA might fail to attach to process with "Windbg Error: WaitForEvent failed"
2a959b
  - JDK-8205534: Remove SymbolTable dependency from serviceability agent
2a959b
  - JDK-8206309: Tier1 SA tests fail
2a959b
  - JDK-8208281: java/nio/channels/AsynchronousSocketChannel/Basic.java timed out
2a959b
  - JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1
2a959b
  - JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect
2a959b
  - JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent!
2a959b
  - JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful
2a959b
  - JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
2a959b
  - JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
2a959b
  - JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
2a959b
  - JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
2a959b
  - JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code
2a959b
  - JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
2a959b
  - JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
2a959b
  - JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
2a959b
  - JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
2a959b
  - JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout
2a959b
  - JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
2a959b
  - JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
2a959b
  - JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
2a959b
  - JDK-8211694: JShell: Redeclared variable should be reset
2a959b
  - JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent
2a959b
  - JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest
2a959b
  - JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55
2a959b
  - JDK-8212807: tools/jar/multiRelease/Basic.java times out
2a959b
  - JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
2a959b
  - JDK-8213214: Set -Djava.io.tmpdir= when running tests
2a959b
  - JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found
2a959b
  - JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
2a959b
  - JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
2a959b
  - JDK-8214074: Ghash optimization using AVX instructions
2a959b
  - JDK-8214491: Upgrade to JLine 3.9.0
2a959b
  - JDK-8214797: TestJmapCoreMetaspace.java timed out
2a959b
  - JDK-8215243: JShell tests failing intermitently with \"Problem cleaning up the following threads:\"
2a959b
  - JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
2a959b
  - JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
2a959b
  - JDK-8215438: jshell tool: Ctrl-D causes EOF
2a959b
  - JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows
2a959b
  - JDK-8216974: HttpConnection not returned to the pool after 204 response
2a959b
  - JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time
2a959b
  - JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
2a959b
  - JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
2a959b
  - JDK-8221658: aarch64: add necessary predicate for ubfx patterns
2a959b
  - JDK-8221759: Crash when completing \"java.io.File.path\"
2a959b
  - JDK-8221918: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails: Shared archive not found
2a959b
  - JDK-8222074: Enhance auto vectorization for x86
2a959b
  - JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp
2a959b
  - JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command
2a959b
  - JDK-8223688: JShell: crash on the instantiation of raw anonymous class
2a959b
  - JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error
2a959b
  - JDK-8223940: Private key not supported by chosen signature algorithm
2a959b
  - JDK-8224184: jshell got IOException at exiting with AIX
2a959b
  - JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc
2a959b
  - JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException
2a959b
  - JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions
2a959b
  - JDK-8226536: Catch OOM from deopt that fails rematerializing objects
2a959b
  - JDK-8226575: OperatingSystemMXBean should be made container aware
2a959b
  - JDK-8226697: Several tests which need the @key headful keyword are missing it.
2a959b
  - JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous
2a959b
  - JDK-8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
2a959b
  - JDK-8227269: Slow class loading when running with JDWP
2a959b
  - JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
2a959b
  - JDK-8228448: Jconsole can't connect to itself
2a959b
  - JDK-8228967: Trust/Key store and SSL context utilities for tests
2a959b
  - JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
2a959b
  - JDK-8229815: Upgrade Jline to 3.12.1
2a959b
  - JDK-8230000: some httpclients testng tests run zero test
2a959b
  - JDK-8230002: javax/xml/jaxp/unittest/transform/SecureProcessingTest.java runs zero test
2a959b
  - JDK-8230010: Remove jdk8037819/BasicTest1.java
2a959b
  - JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter
2a959b
  - JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
2a959b
  - JDK-8230767: FlightRecorderListener returns null recording
2a959b
  - JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
2a959b
  - JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
2a959b
  - JDK-8231586: enlarge encoding space for OopMapValue offsets
2a959b
  - JDK-8231953: Wrong assumption in assertion in oop::register_oop
2a959b
  - JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes
2a959b
  - JDK-8232083: Minimal VM is broken after JDK-8231586
2a959b
  - JDK-8232161: Align some one-way conversion in MS950 charset with Windows
2a959b
  - JDK-8232855: jshell missing word in /help help
2a959b
  - JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration
2a959b
  - JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
2a959b
  - JDK-8233386: Initialize NULL fields for unused decorations
2a959b
  - JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
2a959b
  - JDK-8233686: XML transformer uses excessive amount of memory
2a959b
  - JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions
2a959b
  - JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment
2a959b
  - JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
2a959b
  - JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
2a959b
  - JDK-8234058: runtime/CompressedOops/CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
2a959b
  - JDK-8234149: Several regression tests do not dispose Frame at end
2a959b
  - JDK-8234347: "Turkey" meta time zone does not generate composed localized names
2a959b
  - JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/bug6980209.java fails in linux nightly
2a959b
  - JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC
2a959b
  - JDK-8234541: C1 emits an empty message when it inlines successfully
2a959b
  - JDK-8234687: change javap reporting on unknown attributes
2a959b
  - JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
2a959b
  - JDK-8236548: Localized time zone name inconsistency between English and other locales
2a959b
  - JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
2a959b
  - JDK-8237182: Update copyright header for shenandoah and epsilon files
2a959b
  - JDK-8237888: security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
2a959b
  - JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
2a959b
  - JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
2a959b
  - JDK-8238284: [macos] Zero VM build fails due to an obvious typo
2a959b
  - JDK-8238380: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10
2a959b
  - JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c "multiple definition" link errors with GCC10
2a959b
  - JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10
2a959b
  - JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
2a959b
  - JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
2a959b
  - JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), "should be non-static concrete method");
2a959b
  - JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
2a959b
  - JDK-8240169: javadoc fails to link to non-modular api docs
2a959b
  - JDK-8240295: hs_err elapsed time in seconds is not accurate enough
2a959b
  - JDK-8240360: NativeLibraryEvent has wrong library name on Linux
2a959b
  - JDK-8240676: Meet not symmetric failure when running lucene on jdk8
2a959b
  - JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
2a959b
  - JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
2a959b
  - JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows
2a959b
  - JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException
2a959b
  - JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
2a959b
  - JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
2a959b
  - JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME
2a959b
  - JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
2a959b
  - JDK-8241750: x86_32 build failure after JDK-8227269
2a959b
  - JDK-8242184: CRL generation error with RSASSA-PSS
2a959b
  - JDK-8242283: Can't start JVM when java home path includes non-ASCII character
2a959b
  - JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
2a959b
  - JDK-8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
2a959b
  - JDK-8243138: Enhance BaseLdapServer to support starttls extended request
2a959b
  - JDK-8243320: Add SSL root certificates to Oracle Root CA program
2a959b
  - JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
2a959b
  - JDK-8243389: enhance os::pd_print_cpu_info on linux
2a959b
  - JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment
2a959b
  - JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
2a959b
  - JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions
2a959b
  - JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows)
2a959b
  - JDK-8244087: 2020-04-24 public suffix list update
2a959b
  - JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26
2a959b
  - JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base
2a959b
  - JDK-8244196: adjust output in os_linux
2a959b
  - JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in
2a959b
  - JDK-8244287: JFR: Methods samples have line number 0
2a959b
  - JDK-8244703: "platform encoding not initialized" exceptions with debugger, JNI
2a959b
  - JDK-8244719: CTW: C2 compilation fails with "assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it"
2a959b
  - JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb
2a959b
  - JDK-8244763: Update --release 8 symbol information after JSR 337 MR3
2a959b
  - JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor
2a959b
  - JDK-8245151: jarsigner should not raise duplicate warnings on verification
2a959b
  - JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
2a959b
  - JDK-8245714: "Bad graph detected in build_loop_late" when loads are pinned on loop limit check uncommon branch
2a959b
  - JDK-8245801: StressRecompilation triggers assert "redundunt OSR recompilation detected. memory leak in CodeCache!"
2a959b
  - JDK-8245832: JDK build make-static-libs should build all JDK libraries
2a959b
  - JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan
2a959b
  - JDK-8245981: Upgrade to jQuery 3.5.1
2a959b
  - JDK-8246027: Minimal fastdebug build broken after JDK-8245801
2a959b
  - JDK-8246094: [macos] Sound Recording and playback is not working
2a959b
  - JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode
2a959b
  - JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
2a959b
  - JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError
2a959b
  - JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
2a959b
  - JDK-8246330: Add TLS Tests for Legacy ECDSA curves
2a959b
  - JDK-8246453: TestClone crashes with "all collected exceptions must come from the same place"
2a959b
  - JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods
2a959b
  - JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node
2a959b
  - JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code
2a959b
  - JDK-8247615: Initialize the bytes left for the heap sampler
2a959b
  - JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand
2a959b
  - JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&'
2a959b
  - JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
2a959b
  - JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention
2a959b
  - JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
2a959b
  - JDK-8248348: Regression caused by the update to BCEL 6.0
2a959b
  - JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1
2a959b
  - JDK-8248495: [macos] zerovm is broken due to libffi headers location
2a959b
  - JDK-8248851: CMS: Missing memory fences between free chunk check and klass read
2a959b
  - JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows
2a959b
  - JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650
2a959b
  - JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.
2a959b
  - JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel
2a959b
  - JDK-8249255: Build fails if source code in cygwin home dir
2a959b
  - JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
2a959b
  - JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList
2a959b
  - JDK-8249560: Shenandoah: Fix racy GC request handling
2a959b
  - JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
2a959b
  - JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
2a959b
  - JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
2a959b
  - JDK-8250609: C2 crash in IfNode::fold_compares
2a959b
  - JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics
2a959b
  - JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
2a959b
  - JDK-8250787: Provider.put no longer registering aliases in FIPS env
2a959b
  - JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM
2a959b
  - JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk
2a959b
  - JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds
2a959b
  - JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
2a959b
  - JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure
2a959b
  - JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
2a959b
  - JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
2a959b
  - JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase
2a959b
  - JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
2a959b
  - JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility
2a959b
  - JDK-8252258: [11u] JDK-8242154 changes the default vendor
2a959b
  - JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011
2a959b
  - JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11
2a959b
  - JDK-8253283: [11u] Test build/translations/VerifyTranslations.java failing after JDK-8252258
2a959b
  - JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
2a959b
2a959b
Notes on individual issues:
2a959b
===========================
2a959b
2a959b
core-libs/java.nio.charsets:
2a959b
2a959b
JDK-8240196: Modified the MS950 charset Encoder's Conversion Table
2a959b
==================================================================
2a959b
In this release, some of the one-way byte-to-char mappings have been
2a959b
aligned with the preferred mappings provided by the Unicode Consortium
2a959b
(https://unicode.org/Public/MAPPINGS/VENDORS/MICSFT/WindowsBestFit/bestfit950.txt).
2a959b
2a959b
core-libs/java.util:i18n:
2a959b
2a959b
JDK-8238914: Localized Time Zone Name Inconsistency Between English and Other Locales
2a959b
=====================================================================================
2a959b
English time zone names provided by the CLDR locale provider are now
2a959b
correctly synthesized following the CLDR spec, rather than substituted
2a959b
from the COMPAT provider. For example, SHORT style names are no longer
2a959b
synthesized abbreviations of LONG style names, but instead produce GMT
2a959b
offset formats.
2a959b
2a959b
core-svc/java.lang.management:
2a959b
2a959b
JDK-8236876: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data
2a959b
============================================================================================
2a959b
When executing in a container, or other virtualized operating
2a959b
environment, the following `OperatingSystemMXBean` methods in this
2a959b
release return container specific information, if
2a959b
available. Otherwise, they return host specific data:
2a959b
2a959b
* getFreePhysicalMemorySize()
2a959b
* getTotalPhysicalMemorySize()
2a959b
* getFreeSwapSpaceSize()
2a959b
* getTotalSwapSpaceSize()
2a959b
* getSystemCpuLoad()
2a959b
2a959b
security-libs/java.security:
2a959b
2a959b
JDK-8250756: Added Entrust Root Certification Authority - G4 certificate
2a959b
========================================================================
2a959b
The Entrust root certificate has been added to the cacerts truststore:
2a959b
2a959b
Alias Name: entrustrootcag4
2a959b
Distinguished Name: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,  Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
2a959b
2a959b
JDK-8250860: Added 3 SSL Corporation Root CA Certificates
2a959b
=========================================================
2a959b
The following root certificates have been added to the cacerts truststore for the SSL Corporation:
2a959b
2a959b
Alias Name: sslrootrsaca
2a959b
Distinguished Name: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
2a959b
2a959b
Alias Name: sslrootevrsaca
2a959b
Distinguished Name: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
2a959b
2a959b
Alias Name: sslrooteccca
2a959b
Distinguished Name: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
2a959b
2a959b
JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default
2a959b
===================================================================================
2a959b
Weak named curves are disabled by default by adding them to the
2a959b
following `disabledAlgorithms` security properties:
2a959b
2a959b
* jdk.tls.disabledAlgorithms
2a959b
* jdk.certpath.disabledAlgorithms
2a959b
* jdk.jar.disabledAlgorithms
2a959b
2a959b
Red Hat has always disabled many of the curves provided by upstream,
2a959b
so the only addition in this release is:
2a959b
2a959b
* secp256k1
2a959b
2a959b
The curves that remain enabled are:
2a959b
2a959b
* secp256r1
2a959b
* secp384r1
2a959b
* secp521r1
2a959b
* X25519
2a959b
* X448
2a959b
2a959b
When large numbers of weak named curves need to be disabled, adding
2a959b
individual named curves to each `disabledAlgorithms` property would be
2a959b
overwhelming. To relieve this, a new security property,
2a959b
`jdk.disabled.namedCurves`, is implemented that can list the named
2a959b
curves common to all of the `disabledAlgorithms` properties. To use
2a959b
the new property in the `disabledAlgorithms` properties, precede the
2a959b
full property name with the keyword `include`.  Users can still add
2a959b
individual named curves to `disabledAlgorithms` properties separate
2a959b
from this new property.  No other properties can be included in the
2a959b
`disabledAlgorithms` properties.
2a959b
2a959b
To restore the named curves, remove the `include
2a959b
jdk.disabled.namedCurves` either from specific or from all
2a959b
`disabledAlgorithms` security properties. To restore one or more
2a959b
curves, remove the specific named curve(s) from the
2a959b
`jdk.disabled.namedCurves` property.
2a959b
2a959b
JDK-8244286: Tools Warn If Weak Algorithms Are Used Before Restricting Them
2a959b
===========================================================================
2a959b
The `keytool` and `jarsigner` tools have been updated to warn users
2a959b
about weak cryptographic algorithms being used before they are
2a959b
disabled. In this release, the tools issue warnings for the SHA-1 hash
2a959b
algorithm and 1024-bit RSA/DSA keys.
2a959b
2a959b
security-libs/javax.net.ssl:
2a959b
2a959b
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
2a959b
=========================================================================
2a959b
Two new system properties have been added to customize the TLS
2a959b
signature schemes in JDK. `jdk.tls.client.SignatureSchemes` has been
2a959b
added for the TLS client side, and `jdk.tls.server.SignatureSchemes`
2a959b
has been added for the server side.
2a959b
2a959b
Each system property contains a comma-separated list of supported
2a959b
signature scheme names specifying the signature schemes that could be
2a959b
used for the TLS connections.
2a959b
2a959b
The names are described in the "Signature Schemes" section of the
2a959b
*Java Security Standard Algorithm Names Specification*.
2a959b
2a959b
security-libs/javax.security:
2a959b
2a959b
JDK-8242059: Support for canonicalize in krb5.conf
2a959b
==================================================
2a959b
2a959b
The 'canonicalize' flag in the [krb5.conf file][0] is now supported by
2a959b
the JDK Kerberos implementation. When set to *true*, RFC 6806 [1] name
2a959b
canonicalization is requested by clients in TGT requests to KDC
2a959b
services (AS protocol). Otherwise, and by default, it is not
2a959b
requested.
2a959b
2a959b
The new default behavior is different from previous releases where
2a959b
name canonicalization was always requested by clients in TGT requests
2a959b
to KDC services (provided that support for RFC 6806[1] was not
2a959b
explicitly disabled with the *sun.security.krb5.disableReferrals*
2a959b
system or security properties).
2a959b
2a959b
[0]: https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html
2a959b
[1]: https://tools.ietf.org/html/rfc6806
2a959b
2a959b
JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b
2a959b
====================================================================
2a959b
Following JDK's update to tzdata2020b, the long-obsolete files
2a959b
pacificnew and systemv have been removed. As a result, the
2a959b
"US/Pacific-New" zone name declared in the pacificnew data file is no
2a959b
longer available for use.
2a959b
2a959b
Information regarding the update can be viewed at
2a959b
https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html
2a959b
2f6c9a
New in release OpenJDK 11.0.8 (2020-07-14):
2f6c9a
===========================================
2f6c9a
Live versions of these release notes can be found at:
2f6c9a
  * https://bitly.com/oj1108
2f6c9a
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.8.txt
2f6c9a
2f6c9a
* Security fixes
2f6c9a
  - JDK-8230613: Better ASCII conversions
2f6c9a
  - JDK-8231800: Better listing of arrays
2f6c9a
  - JDK-8232014: Expand DTD support
2f6c9a
  - JDK-8233234: Better Zip Naming
2f6c9a
  - JDK-8233239, CVE-2020-14562: Enhance TIFF support
2f6c9a
  - JDK-8233255: Better Swing Buttons
2f6c9a
  - JDK-8234032: Improve basic calendar services
2f6c9a
  - JDK-8234042: Better factory production of certificates
2f6c9a
  - JDK-8234418: Better parsing with CertificateFactory
2f6c9a
  - JDK-8234836: Improve serialization handling
2f6c9a
  - JDK-8236191: Enhance OID processing
2f6c9a
  - JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
2f6c9a
  - JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
2f6c9a
  - JDK-8237592, CVE-2020-14577: Enhance certificate verification
2f6c9a
  - JDK-8238002, CVE-2020-14581: Better matrix operations
2f6c9a
  - JDK-8238013: Enhance String writing
2f6c9a
  - JDK-8238804: Enhance key handling process
2f6c9a
  - JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
2f6c9a
  - JDK-8238843: Enhanced font handing
2f6c9a
  - JDK-8238920, CVE-2020-14583: Better Buffer support
2f6c9a
  - JDK-8238925: Enhance WAV file playback
2f6c9a
  - JDK-8240119, CVE-2020-14593: Less Affine Transformations
2f6c9a
  - JDK-8240482: Improved WAV file playback
2f6c9a
  - JDK-8241379: Update JCEKS support
2f6c9a
  - JDK-8241522: Manifest improved jar headers redux
2f6c9a
  - JDK-8242136, CVE-2020-14621: Better XML namespace handling
2f6c9a
* Other changes
2f6c9a
  - JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
2f6c9a
  - JDK-7124307: JSpinner and changing value by mouse
2f6c9a
  - JDK-8022574: remove HaltNode code after uncommon trap calls
2f6c9a
  - JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
2f6c9a
  - JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
2f6c9a
  - JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
2f6c9a
  - JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo
2f6c9a
  - JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly
2f6c9a
  - JDK-8080353: JShell: Better error message on attempting to add default method
2f6c9a
  - JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled
2f6c9a
  - JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
2f6c9a
  - JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout
2f6c9a
  - JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily
2f6c9a
  - JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping
2f6c9a
  - JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
2f6c9a
  - JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
2f6c9a
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
2f6c9a
  - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
2f6c9a
  - JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently
2f6c9a
  - JDK-8191930: [Graal] emits unparseable XML into compile log
2f6c9a
  - JDK-8193879: Java debugger hangs on method invocation
2f6c9a
  - JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
2f6c9a
  - JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
2f6c9a
  - JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
2f6c9a
  - JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
2f6c9a
  - JDK-8198339: Test javax/swing/border/Test6981576.java is unstable
2f6c9a
  - JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
2f6c9a
  - JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740
2f6c9a
  - JDK-8203672: JNI exception pending in PlainSocketImpl.c
2f6c9a
  - JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398
2f6c9a
  - JDK-8204834: Fix confusing "allocate" naming in OopStorage
2f6c9a
  - JDK-8205399: Set node color on pinned HashMap.TreeNode deletion
2f6c9a
  - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
2f6c9a
  - JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value
2f6c9a
  - JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
2f6c9a
  - JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
2f6c9a
  - JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
2f6c9a
  - JDK-8209333: Socket reset issue for TLS 1.3 socket close
2f6c9a
  - JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
2f6c9a
  - JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/ArchivedModuleCompareTest.java fails with EnableJVMCI.
2f6c9a
  - JDK-8210147: adjust some WSAGetLastError usages in windows network coding
2f6c9a
  - JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
2f6c9a
  - JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
2f6c9a
  - JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to check if EnableJVMCI is set.
2f6c9a
  - JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
2f6c9a
  - JDK-8211301: [macos] support full window content options
2f6c9a
  - JDK-8211332: Space for stub routines (code_size2) is too small on new Skylake CPUs
2f6c9a
  - JDK-8211339: NPE during SSL handshake caused by HostnameChecker
2f6c9a
  - JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
2f6c9a
  - JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
2f6c9a
  - JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE when JVMCI is absent
2f6c9a
  - JDK-8212167: JShell : Stack trace of exception has wrong line number
2f6c9a
  - JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
2f6c9a
  - JDK-8212986: Make Visual Studio compiler check less strict
2f6c9a
  - JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure
2f6c9a
  - JDK-8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent
2f6c9a
  - JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
2f6c9a
  - JDK-8214418: half-closed SSLEngine status may cause application dead loop
2f6c9a
  - JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"
2f6c9a
  - JDK-8214444: Wrong strncat limits in dfa.cpp
2f6c9a
  - JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
2f6c9a
  - JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"
2f6c9a
  - JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
2f6c9a
  - JDK-8214862: assert(proj != __null) at compile.cpp:3251
2f6c9a
  - JDK-8215369: Jcstress pollute /var/tmp with temporary files.
2f6c9a
  - JDK-8215551: Missing case label in nmethod::reloc_string_for()
2f6c9a
  - JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
2f6c9a
  - JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
2f6c9a
  - JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
2f6c9a
  - JDK-8216154: C4819 warnings at HotSpot sources on Windows
2f6c9a
  - JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
2f6c9a
  - JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
2f6c9a
  - JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
2f6c9a
  - JDK-8217447: Develop flag TraceICs is broken
2f6c9a
  - JDK-8217606: LdapContext#reconnect always opens a new connection
2f6c9a
  - JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
2f6c9a
  - JDK-8219214: Infinite Loop in CodeSection::dump()
2f6c9a
  - JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
2f6c9a
  - JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
2f6c9a
  - JDK-8221121: applications/microbenchmarks are encountering crashes in tier5
2f6c9a
  - JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread
2f6c9a
  - JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
2f6c9a
  - JDK-8221741: ClassCastException can happen when fontconfig.properties is used
2f6c9a
  - JDK-8221823: Requested JDialog width is ignored
2f6c9a
  - JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
2f6c9a
  - JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
2f6c9a
  - JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metric
2f6c9a
  - JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/RemoveDropTargetCrashTest.java fails on MacOS
2f6c9a
  - JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
2f6c9a
  - JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
2f6c9a
  - JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
2f6c9a
  - JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
2f6c9a
  - JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
2f6c9a
  - JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
2f6c9a
  - JDK-8225126: Test SetBoundsPaintTest.html faild on Windows when desktop is scaled
2f6c9a
  - JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
2f6c9a
  - JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
2f6c9a
  - JDK-8225653: Provide more information when hitting SIGILL from HaltNode
2f6c9a
  - JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
2f6c9a
  - JDK-8225789: Empty method parameter type should generate ClassFormatError
2f6c9a
  - JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
2f6c9a
  - JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden.
2f6c9a
  - JDK-8226653: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
2f6c9a
  - JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread
2f6c9a
  - JDK-8226879: Memory leak in Type::hashcons
2f6c9a
  - JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4
2f6c9a
  - JDK-8228407: JVM crashes with shared archive file mismatch
2f6c9a
  - JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
2f6c9a
  - JDK-8228757: Fail fast if the handshake type is unknown
2f6c9a
  - JDK-8229158: make UseSwitchProfiling non-experimental or false by-default
2f6c9a
  - JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed
2f6c9a
  - JDK-8229855: C2 fails with assert(false) failed: bad AD file
2f6c9a
  - JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint
2f6c9a
  - JDK-8231118: ARM32: Math tests failures
2f6c9a
  - JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
2f6c9a
  - JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
2f6c9a
  - JDK-8231438: [macOS] Dark mode for the desktop is not supported
2f6c9a
  - JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling
2f6c9a
  - JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors
2f6c9a
  - JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
2f6c9a
  - JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
2f6c9a
  - JDK-8231671: Fix copyright headers in hotspot (missing comma after year)
2f6c9a
  - JDK-8231720: Some perf regressions after 8225653
2f6c9a
  - JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
2f6c9a
  - JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument
2f6c9a
  - JDK-8232080: jlink plugins for vendor information and run-time options
2f6c9a
  - JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
2f6c9a
  - JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
2f6c9a
  - JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
2f6c9a
  - JDK-8232357: Compare version info of Santuario to legal notice
2f6c9a
  - JDK-8232572: Add hooks for custom output dir in Bundles.gmk
2f6c9a
  - JDK-8232634: Problem List ICMColorDataTest.java
2f6c9a
  - JDK-8232748: Build static versions of certain JDK libraries
2f6c9a
  - JDK-8232846: ProcessHandle.Info command with non-English shows question marks
2f6c9a
  - JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies
2f6c9a
  - JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
2f6c9a
  - JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
2f6c9a
  - JDK-8233291: [TESTBUG] tools/jlink/plugins/VendorInfoPluginsTest.java fails with debug or non-server VMs
2f6c9a
  - JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp
2f6c9a
  - JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
2f6c9a
  - JDK-8233608: Minimal build broken after JDK-8233494
2f6c9a
  - JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
2f6c9a
  - JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is ON
2f6c9a
  - JDK-8233707: systemScale.cpp could not compile with VS2019
2f6c9a
  - JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
2f6c9a
  - JDK-8233880: Support compilers with multi-digit major version numbers
2f6c9a
  - JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return type
2f6c9a
  - JDK-8234137: The "AutoTestOnTop.java" test may run external applications
2f6c9a
  - JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
2f6c9a
  - JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/ModalDialogEnterExitEventsTest.java fails in Windows
2f6c9a
  - JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
2f6c9a
  - JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/DisposeDialogNotActivateOwnerTest/DisposeDialogNotActivateOwnerTest.java fails on linux-x64 nightly
2f6c9a
  - JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
2f6c9a
  - JDK-8234522: [macos] Crash with use of native file dialog
2f6c9a
  - JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor
2f6c9a
  - JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out
2f6c9a
  - JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
2f6c9a
  - JDK-8234728: Some security tests should support TLSv1.3
2f6c9a
  - JDK-8234779: Provide idiom for declaring classes noncopyable
2f6c9a
  - JDK-8234968: check calloc rv in libinstrument InvocationAdapter
2f6c9a
  - JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/DrawImageBG/SystemBgColorTest.java fails
2f6c9a
  - JDK-8235183: Remove the "HACK CODE" in comment
2f6c9a
  - JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
2f6c9a
  - JDK-8235311: Tag mismatch may alert bad_record_mac
2f6c9a
  - JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
2f6c9a
  - JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
2f6c9a
  - JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
2f6c9a
  - JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
2f6c9a
  - JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
2f6c9a
  - JDK-8235686: Add more custom hooks in Bundles.gmk
2f6c9a
  - JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
2f6c9a
  - JDK-8235762: JVM crash in SWPointer during C2 compilation
2f6c9a
  - JDK-8235834: IBM-943 charset encoder needs updating
2f6c9a
  - JDK-8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property.
2f6c9a
  - JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image
2f6c9a
  - JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
2f6c9a
  - JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
2f6c9a
  - JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
2f6c9a
  - JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
2f6c9a
  - JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
2f6c9a
  - JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
2f6c9a
  - JDK-8236897: Fix the copyright header for pkcs11gcm2.h
2f6c9a
  - JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build
2f6c9a
  - JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
2f6c9a
  - JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing
2f6c9a
  - JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
2f6c9a
  - JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails with release VMs
2f6c9a
  - JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291
2f6c9a
  - JDK-8237192: Generate stripped/public pdbs on Windows for jdk images
2f6c9a
  - JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers
2f6c9a
  - JDK-8237474: Default SSLEngine should create in server role
2f6c9a
  - JDK-8237859: C2: Crash when loads float above range check
2f6c9a
  - JDK-8237951: CTW: C2 compilation fails with "malformed control flow"
2f6c9a
  - JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
2f6c9a
  - JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes.
2f6c9a
  - JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs
2f6c9a
  - JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
2f6c9a
  - JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
2f6c9a
  - JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
2f6c9a
  - JDK-8238676: jni crashes on accessing it from process exit hook
2f6c9a
  - JDK-8238721: Add failing client jtreg tests to the Problem List
2f6c9a
  - JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
2f6c9a
  - JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
2f6c9a
  - JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
2f6c9a
  - JDK-8238898: Missing hash characters for header on license file
2f6c9a
  - JDK-8238942: Rendering artifacts with LCD text and fractional metrics
2f6c9a
  - JDK-8238985: [TESTBUG] The arrow image is blue instead of green
2f6c9a
  - JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
2f6c9a
  - JDK-8239055: Wrong implementation of VMState.hasListener
2f6c9a
  - JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code.
2f6c9a
  - JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses
2f6c9a
  - JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning
2f6c9a
  - JDK-8239351: Give more meaningful InternalError messages in Deflater.c
2f6c9a
  - JDK-8239365: ProcessBuilder test modifications for AIX execution
2f6c9a
  - JDK-8239456: vtable stub generation: assert failure (code size estimate)
2f6c9a
  - JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
2f6c9a
  - JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
2f6c9a
  - JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating "END." marker at lastline is not always true
2f6c9a
  - JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings
2f6c9a
  - JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
2f6c9a
  - JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
2f6c9a
  - JDK-8239819: XToolkit: Misread of screen information memory
2f6c9a
  - JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
2f6c9a
  - JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder
2f6c9a
  - JDK-8239915: Zero VM crashes when handling dynamic constant
2f6c9a
  - JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
2f6c9a
  - JDK-8239976: Put JDK-8239965 on the ProblemList.txt
2f6c9a
  - JDK-8240073: Fix 'test-make' build target in 11u
2f6c9a
  - JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
2f6c9a
  - JDK-8240202: A few client tests leave mouse buttons pressed
2f6c9a
  - JDK-8240220: IdealLoopTree::dump_head predicate printing is broken
2f6c9a
  - JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate
2f6c9a
  - JDK-8240227: Loop predicates should be copied to unswitched loops
2f6c9a
  - JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/compiler/loopopts/superword/SumRedAbsNeg_Float.java
2f6c9a
  - JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print
2f6c9a
  - JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module
2f6c9a
  - JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
2f6c9a
  - JDK-8240603: Windows 32bit compile error after 8238676
2f6c9a
  - JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
2f6c9a
  - JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:"
2f6c9a
  - JDK-8240786: [TESTBUG] The test java/awt/Window/GetScreenLocation/GetScreenLocationTest.java fails on HiDPI screen
2f6c9a
  - JDK-8240824: enhance print_full_memory_info on Linux by THP related information
2f6c9a
  - JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
2f6c9a
  - JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
2f6c9a
  - JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
2f6c9a
  - JDK-8241445: Fix copyright in test/jdk/tools/launcher/ArgFileSyntax.java
2f6c9a
  - JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
2f6c9a
  - JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
2f6c9a
  - JDK-8241556: Memory leak if -XX:CompileCommand is set
2f6c9a
  - JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"
2f6c9a
  - JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
2f6c9a
  - JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set
2f6c9a
  - JDK-8241660: Add virtualization information output to hs_err file on macOS
2f6c9a
  - JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
2f6c9a
  - JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
2f6c9a
  - JDK-8241900: Loop unswitching may cause dependence on null check to be lost
2f6c9a
  - JDK-8241948: enhance list of environment variables printed in hs_err file
2f6c9a
  - JDK-8241996: on linux set full relro in the linker flags
2f6c9a
  - JDK-8242108: Performance regression after fix for JDK-8229496
2f6c9a
  - JDK-8242141: New System Properties to configure the TLS signature schemes
2f6c9a
  - JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
2f6c9a
  - JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable
2f6c9a
  - JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
2f6c9a
  - JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
2f6c9a
  - JDK-8242379: [TESTBUG] compiler/loopopts/TestLoopUnswitchingLostCastDependency.java fails with release VMs
2f6c9a
  - JDK-8242470: Update Xerces to Version 2.12.1
2f6c9a
  - JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
2f6c9a
  - JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
2f6c9a
  - JDK-8242626: enhance posix print_rlimit_info
2f6c9a
  - JDK-8243059: Build fails when --with-vendor-name contains a comma
2f6c9a
  - JDK-8243539: Copyright info (Year) should be updated for fix of 8241638
2f6c9a
  - JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
2f6c9a
  - JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
2f6c9a
  - JDK-8244520: problemlist java/awt/font/Rotate/RotatedFontTest.java on linux
2f6c9a
  - JDK-8244777: ClassLoaderStats VM Op uses constant hash value
2f6c9a
  - JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function
2f6c9a
  - JDK-8244951: Missing entitlements for hardened runtime
2f6c9a
  - JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
2f6c9a
  - JDK-8245649: Revert 8245397 backport of 8230591
2f6c9a
  - JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
2f6c9a
  - JDK-8246613: Choose the default SecureRandom algo based on registration ordering
2f6c9a
  - JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
2f6c9a
2f6c9a
Notes on individual issues:
2f6c9a
===========================
2f6c9a
2f6c9a
security-libs/java.security:
2f6c9a
2f6c9a
JDK-8244167: Removal of Comodo Root CA Certificate
2f6c9a
==================================================
2f6c9a
The following expired Comodo root CA certificate was removed from the `cacerts` keystore: +
2f6c9a
alias name "addtrustclass1ca [jdk]"
2f6c9a
2f6c9a
Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
2f6c9a
2f6c9a
JDK-8244166: Removal of DocuSign Root CA Certificate
2f6c9a
====================================================
2f6c9a
The following expired DocuSign root CA certificate was removed from the `cacerts` keystore: +
2f6c9a
alias name "keynectisrootca [jdk]"
2f6c9a
2f6c9a
Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
2f6c9a
2f6c9a
security-libs/javax.crypto:pkcs11:
2f6c9a
2f6c9a
JDK-8240191: Allow SunPKCS11 initialization with NSS when external FIPS modules are present in the Security Modules Database
2f6c9a
============================================================================================================================
2f6c9a
The SunPKCS11 security provider can now be initialized with NSS when
2f6c9a
FIPS-enabled external modules are configured in the Security Modules
2f6c9a
Database (NSSDB). Prior to this change, the SunPKCS11 provider would
2f6c9a
throw a RuntimeException with the message: "FIPS flag set for
2f6c9a
non-internal module" when such a library was configured for NSS in
2f6c9a
non-FIPS mode.
2f6c9a
2f6c9a
This change allows the JDK to work properly with recent NSS releases
2f6c9a
in GNU/Linux operating systems when the system-wide FIPS policy is
2f6c9a
turned on.
2f6c9a
2f6c9a
Further information can be found in JDK-8238555.
2f6c9a
2f6c9a
security-libs/javax.net.ssl:
2f6c9a
2f6c9a
JDK-8245077: Default SSLEngine Should Create in Server Role
2f6c9a
===========================================================
2f6c9a
In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client
2f6c9a
mode when handshaking.  As a result, the set of default enabled
2f6c9a
protocols may differ to what is expected. `SSLEngine` would usually be
2f6c9a
used in server mode. From this JDK release onwards, `SSLEngine` will
2f6c9a
default to server mode. The
2f6c9a
`javax.net.ssl.SSLEngine.setUseClientMode(boolean mode)` method may
2f6c9a
be used to configure the mode.
2f6c9a
2f6c9a
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
2f6c9a
=========================================================================
2f6c9a
2f6c9a
Two new System Properties are added to customize the TLS signature
2f6c9a
schemes in JDK.  `jdk.tls.client.SignatureSchemes` is added for TLS
2f6c9a
client side, and `jdk.tls.server.SignatureSchemes` is added for server
2f6c9a
side.
2f6c9a
2f6c9a
Each System Property contains a comma-separated list of supported
2f6c9a
signature scheme names specifying the signature schemes that could be
2f6c9a
used for the TLS connections.
2f6c9a
2f6c9a
The names are described in the "Signature Schemes" section of the
2f6c9a
*Java Security Standard Algorithm Names Specification*.
2f6c9a
2a265a
New in release OpenJDK 11.0.7 (2020-04-14):
2a265a
===========================================
2a265a
Live versions of these release notes can be found at:
2a265a
  * https://bitly.com/oj1107
2a265a
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.txt
2a265a
2a265a
* Security fixes
2a265a
  - JDK-8223898, CVE-2020-2754: Forward references to Nashorn
2a265a
  - JDK-8223904, CVE-2020-2755: Improve Nashorn matching
2a265a
  - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
2a265a
  - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
2a265a
  - JDK-8225603: Enhancement for big integers
2a265a
  - JDK-8226346: Build better binary builders
2a265a
  - JDK-8227467: Better class method invocations
2a265a
  - JDK-8227542: Manifest improved jar headers
2a265a
  - JDK-8229733: TLS message handling improvements
2a265a
  - JDK-8231415, CVE-2020-2773: Better signatures in XML
2a265a
  - JDK-8231785: Improved socket permissions
2a265a
  - JDK-8232424, CVE-2020-2778: More constrained algorithms
2a265a
  - JDK-8232581, CVE-2020-2767: Improve TLS verification
2a265a
  - JDK-8233250: Better X11 rendering
2a265a
  - JDK-8233410: Better Build Scripting
2a265a
  - JDK-8234027: Better JCEKS key support
2a265a
  - JDK-8234408, CVE-2020-2781: Improve TLS session handling
2a265a
  - JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
2a265a
  - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
2a265a
  - JDK-8235274, CVE-2020-2805: Enhance typing of methods
2a265a
  - JDK-8235691, CVE-2020-2816: Enhance TLS connectivity
2a265a
  - JDK-8236201, CVE-2020-2830: Better Scanner conversions
2a265a
  - JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap
2a265a
* Other changes
2a265a
  - JDK-4919790: Errors in alert ssl message does not reflect the actual certificate status
2a265a
  - JDK-4949105: Access Bridge lacks html tags parsing
2a265a
  - JDK-7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
2a265a
  - JDK-7143743: Potential memory leak with zip provider
2a265a
  - JDK-8005819: Support cross-realm MSSFU
2a265a
  - JDK-8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/4983388/bug4983388.java fails with shortcuts on menus do not work
2a265a
  - JDK-8068184: Fix for JDK-8032832 caused a deadlock
2a265a
  - JDK-8145845: [AOT] NullPointerException in compiler/whitebox/GetCodeHeapEntriesTest.java
2a265a
  - JDK-8152988: [AOT] Update test batch definitions to include aot-ed java.base module mode into hs-comp testing
2a265a
  - JDK-8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle cross-compilation
2a265a
  - JDK-8163083: SocketListeningConnector does not allow invocations with port 0
2a265a
  - JDK-8163251: Hard coded loop limit prevents reading of smart card data greater than 8k
2a265a
  - JDK-8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java fails with -XX:-EliminateAllocations
2a265a
  - JDK-8169718: nsk/jdb/locals/locals002: ERROR: Cannot find boolVar with expected value: false
2a265a
  - JDK-8176556: java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails for JFIF
2a265a
  - JDK-8178798: Two compiler/aot/verification/vmflags tests fail by timeout with UseAVX=3
2a265a
  - JDK-8183107: PKCS11 regression regarding checkKeySize
2a265a
  - JDK-8185005: Improve performance of ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
2a265a
  - JDK-8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
2a265a
  - JDK-8189861: Refactor CacheFind
2a265a
  - JDK-8193042: NativeLookup::lookup_critical_entry() should only load shared library once
2a265a
  - JDK-8193596: java/net/DatagramPacket/ReuseBuf.java failed due to timeout
2a265a
  - JDK-8194944: Regression automated test 'open/test/jdk/javax/swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java' fails
2a265a
  - JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
2a265a
  - JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java causes NPE
2a265a
  - JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
2a265a
  - JDK-8198398: Test javax/swing/JColorChooser/Test6199676.java fails in mach5
2a265a
  - JDK-8199072: Test javax/swing/GroupLayout/6613904/bug6613904.java is unstable
2a265a
  - JDK-8200432: javadoc fails with ClassCastException on {@link byte[]}
2a265a
  - JDK-8201349: build broken when configured with --with-zlib=bundled on gcc 7.3
2a265a
  - JDK-8201355: Avoid native memory allocation in sun.security.mscapi.PRNG.generateSeed
2a265a
  - JDK-8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
2a265a
  - JDK-8203364: Some serviceability/sa/ tests intermittently fail with java.io.IOException: LingeredApp terminated with non-zero exit code 3
2a265a
  - JDK-8203687: javax/net/ssl/compatibility/Compatibility.java supports TLS 1.3
2a265a
  - JDK-8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The divider location is wrong
2a265a
  - JDK-8203911: Test runtime/modules/getModuleJNI/GetModule fails with -Xcheck:jni
2a265a
  - JDK-8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out of java heap
2a265a
  - JDK-8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent 7 timed out
2a265a
  - JDK-8204551: Event descriptions are truncated in logs
2a265a
  - JDK-8206963: [AOT] bug with multiple class loaders
2a265a
  - JDK-8207367: 10 vmTestbase/nsk/jdi tests timed out when running with jtreg
2a265a
  - JDK-8207832: serviceability/sa/ClhsdbCDSCore.java failed with "Couldn't find core file location"
2a265a
  - JDK-8207938: At step6,Click Add button,case failed automatically.
2a265a
  - JDK-8208157: requires.VMProps throws NPE for missing properties in "release" file
2a265a
  - JDK-8208379: compiler/jvmci/events/JvmciNotifyInstallEventTest.java failed with "Got unexpected event count after 2nd install attempt: expected 9 to equal 2"
2a265a
  - JDK-8208658: Make CDS archived heap regions usable even if compressed oop encoding has changed
2a265a
  - JDK-8208715: Conversion of milliseconds to nanoseconds in UNIXProcess contains bug
2a265a
  - JDK-8209361: [AOT] Unexpected number of references for JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111-->111]: 0 (expected at least 1)
2a265a
  - JDK-8209385: CDS runtime classpath checking is too strict when only classes from the system modules are archived
2a265a
  - JDK-8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
2a265a
  - JDK-8209418: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
2a265a
  - JDK-8209494: Create a test for SwingSet InternalFrameDemo
2a265a
  - JDK-8209499: Create test for SwingSet EditorPaneDemo
2a265a
  - JDK-8209574: [AOT] breakpoint events are generated in different threads does not meet expected count
2a265a
  - JDK-8209686: cleanup arguments to PhaseIdealLoop() constructor
2a265a
  - JDK-8209789: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
2a265a
  - JDK-8209802: Garbage collectors should register JFR types themselves to avoid build errors.
2a265a
  - JDK-8209807: improve handling exception in requires.VMProps
2a265a
  - JDK-8209817: stack is executable when building with Clang on Linux
2a265a
  - JDK-8209824: Improve the code coverage for ThreadLocal
2a265a
  - JDK-8209826: Undefined reference to os::write after JDK-8209657 (filemap.hpp cleanup)
2a265a
  - JDK-8209850: Allow NamedThreads to use GlobalCounter critical sections
2a265a
  - JDK-8209976: Improve iteration over non-JavaThreads
2a265a
  - JDK-8209993: Create a test for SwingSet3 ToolTipDemo
2a265a
  - JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
2a265a
  - JDK-8210052: Enable testing for all the available look and feels in SwingSet3 demo tests
2a265a
  - JDK-8210055: Enable different look and feel tests in SwingSet3 demo tests
2a265a
  - JDK-8210057: Enable different look and feels in SwingSet3 demo test InternalFrameDemoTest
2a265a
  - JDK-8210058: Algorithmic Italic font leans opposite angle in Printing
2a265a
  - JDK-8210220: [AOT] jdwp test cases are failing with error # ERROR: TEST FAILED: Cought IOException while receiving event packet
2a265a
  - JDK-8210289: ArchivedKlassSubGraphInfoRecord is incomplete
2a265a
  - JDK-8210459: Add support for generating compile_commands.json
2a265a
  - JDK-8210476: sun/security/mscapi/PrngSlow.java fails with Still too slow
2a265a
  - JDK-8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/referringObjects/referringObjects002/referringObjects002.java fails with unexpected size of ClassLoaderReference.referringObjects
2a265a
  - JDK-8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java crash
2a265a
  - JDK-8210632: Add key exchange algorithm to javax/net/ssl/TLSCommon/CipherSuite.java
2a265a
  - JDK-8210699: Problem list tests which times out in Xcomp mode
2a265a
  - JDK-8210793: [JVMCI] AllocateCompileIdTest.java failed to find DiagnosticCommand.class
2a265a
  - JDK-8210910: Create test for FileChooserDemo
2a265a
  - JDK-8210994: Create test for SwingSet3 FrameDemo
2a265a
  - JDK-8211139: Increase timeout value in all tests under jdk/sanity/client/SwingSet/src
2a265a
  - JDK-8211160: Handle different look and feels in JInternalFrameOperator
2a265a
  - JDK-8211211: vmTestbase/metaspace/stressDictionary/StressDictionary.java timeout
2a265a
  - JDK-8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
2a265a
  - JDK-8211443: Enable different look and feels in SwingSet3 demo test SplitPaneDemoTest
2a265a
  - JDK-8211703: JInternalFrame : java.lang.AssertionError: cannot find the internal frame
2a265a
  - JDK-8211781: re-building fails after changing Graal sources
2a265a
  - JDK-8212897: Some improvements in the EditorPaneDemotest
2a265a
  - JDK-8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04 LTS
2a265a
  - JDK-8213009: Refactoring existing SunMSCAPI classes
2a265a
  - JDK-8213010: Supporting keys created with certmgr.exe
2a265a
  - JDK-8213168: Enable different look and feel tests in SwingSet3 demo test FileChooserDemoTest
2a265a
  - JDK-8213348: jdk.internal.vm.compiler.management service providers missing in module descriptor
2a265a
  - JDK-8213906: Update arm devkits with libXrandr headers
2a265a
  - JDK-8213908: AssertionError in DeferredAttr at setOverloadKind
2a265a
  - JDK-8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
2a265a
  - JDK-8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed: elembt=byte; loadbt=void; unsigned=0
2a265a
  - JDK-8214345: infinite recursion while checking super class
2a265a
  - JDK-8214471: Enable different look and feel tests in SwingSet3 demo test ToolTipDemoTest
2a265a
  - JDK-8214534: Setting of THIS_FILE in the build is broken
2a265a
  - JDK-8214557: Filter out VM flags which don't affect AOT code generation
2a265a
  - JDK-8214578: [macos] Problem with backslashes on macOS/JIS keyboard: Java ignores system settings
2a265a
  - JDK-8214840: runtime/NMT/MallocStressTest.java timed out
2a265a
  - JDK-8214850: Rename vm_operations.?pp files to vmOperations.?pp files
2a265a
  - JDK-8214904: Test8004741.java failed due to "Too few ThreadDeath hits; expected at least 6 but saw only 5"
2a265a
  - JDK-8215322: add @file support to jaotc
2a265a
  - JDK-8215355: Object monitor deadlock with no threads holding the monitor (using jemalloc 5.1)
2a265a
  - JDK-8215396: JTabbedPane preferred size calculation is wrong for SCROLL_TAB_LAYOUT
2a265a
  - JDK-8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java crashed with AOT enabled
2a265a
  - JDK-8216353: Use utility APIs introduced in org/netbeans/jemmy/util/LookAndFeel class in client sanity test cases
2a265a
  - JDK-8216354: Syntax error in toolchain_windows.m4
2a265a
  - JDK-8216472: (se) Stack overflow during selection operation leads to crash (win)
2a265a
  - JDK-8216535: tools/jimage/JImageExtractTest.java timed out
2a265a
  - JDK-8217235: Create automated test for SwingSet ColorChooserDemoTest
2a265a
  - JDK-8217297: Add support for multiple look and feel for SwingSet SliderDemoTest
2a265a
  - JDK-8217338: [Containers] Improve systemd slice memory limit support
2a265a
  - JDK-8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
2a265a
  - JDK-8217634: RunTest documentation and usability update
2a265a
  - JDK-8217717: ZGC: Broken oop map in C1 load barrier stub
2a265a
  - JDK-8217728: Speed up incremental rerun of "make hotspot"
2a265a
  - JDK-8218268: Javac treats Manifest Class-Path entries as Paths instead of URLs
2a265a
  - JDK-8218662: Allow 204 responses with Content-Length:0
2a265a
  - JDK-8218882: NET_Writev is declared, NET_WriteV is defined
2a265a
  - JDK-8218889: Improperly use of the Optional API
2a265a
  - JDK-8219205: JFR file without license header
2a265a
  - JDK-8219597: (bf) Heap buffer state changes could provoke unexpected exceptions
2a265a
  - JDK-8219723: javax/net/ssl/compatibility/Compatibility.java failed on some SNI cases
2a265a
  - JDK-8220348: [ntintel] asserts about copying unaligned array
2a265a
  - JDK-8220451: jdi/EventQueue/remove/remove004 failed due to "ERROR: thread2 is not alive"
2a265a
  - JDK-8220456: jdi/EventQueue/remove_l/remove_l004 failed due to "TIMEOUT while waiting for event"
2a265a
  - JDK-8220479: java/nio/channels/Selector/SelectWithConsumer.java failed at testTwoChannels()
2a265a
  - JDK-8220613: java/util/Arrays/TimSortStackSize2.java times out with fastdebug build
2a265a
  - JDK-8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed out
2a265a
  - JDK-8220786: Create new switch to redirect error reporting output to stdout or stderr
2a265a
  - JDK-8221270: Duplicated synchronized keywords in SSLSocketImpl
2a265a
  - JDK-8221312: test/jdk/sanity/client/SwingSet/src/ColorChooserDemoTest.java failed
2a265a
  - JDK-8221851: Use of THIS_FILE in hotspot invalidates precompiled header on Linux/GCC
2a265a
  - JDK-8221885: Add intermittent test in the JavaSound to the ProblemList
2a265a
  - JDK-8222264: Windows incremental build is broken with JDK-8217728
2a265a
  - JDK-8222391: javax/net/ssl/compatibility/Compatibility.java should be more flexible
2a265a
  - JDK-8222448: java/lang/reflect/PublicMethods/PublicMethodsTest.java times out
2a265a
  - JDK-8222519: ButtonDemoScreenshotTest fails randomly with "still state to be reached"
2a265a
  - JDK-8222741: jdi/EventQueue/remove/remove004 fails due to VMDisconnectedException
2a265a
  - JDK-8223003: SunMSCAPI keys are not cleaned up
2a265a
  - JDK-8223063: Support CNG RSA keys
2a265a
  - JDK-8223158: Docked MacBook cannot start any Java Swing applications
2a265a
  - JDK-8223260: NamingManager should cache InitialContextFactory
2a265a
  - JDK-8223464: Improve version string for Oracle CI builds
2a265a
  - JDK-8223558: Java does not render Myanmar script correctly
2a265a
  - JDK-8223627: jdk-13+20 bundle name contains null instead of ea
2a265a
  - JDK-8223638: Replace wildcard address with loopback or local host in tests - part 6
2a265a
  - JDK-8223678: Add Visual Studio Code workspace generation support (for native code)
2a265a
  - JDK-8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due to hang in LdapRequest.getReplyBer
2a265a
  - JDK-8223769: Assert triggers with -XX:+StressReflectiveCode
2a265a
  - JDK-8224187: Refactor arraycopy_prologue to allow ZGC read barriers on arraycopy
2a265a
  - JDK-8224475: JTextPane does not show images in HTML rendering
2a265a
  - JDK-8224673: Adjust permission for delayed starting of debugging
2a265a
  - JDK-8224705: Tests that need to be problem-listed or have printer resources
2a265a
  - JDK-8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot find J2Ddemo.jar
2a265a
  - JDK-8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/NoAutotransferToDisabledCompTest.java fails linux-x64
2a265a
  - JDK-8224830: test/jdk/java/awt/Focus/ModalExcludedWindowClickTest/ModalExcludedWindowClickTest.java fails on linux-x64
2a265a
  - JDK-8224851: AArch64: fix warnings and errors with Clang and GCC 8.3
2a265a
  - JDK-8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with stream closed
2a265a
  - JDK-8225007: java/awt/print/PrinterJob/LandscapeStackOverflow.java may hang
2a265a
  - JDK-8225105: java/awt/Focus/ShowFrameCheckForegroundTest/ShowFrameCheckForegroundTest.java fails in Windows 10
2a265a
  - JDK-8225117: java/math/BigInteger/SymmetricRangeTests.java fails with ParseException
2a265a
  - JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts test
2a265a
  - JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
2a265a
  - JDK-8225144: [macos] In Aqua L&F backspace key does not delete when Shift is pressed
2a265a
  - JDK-8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
2a265a
  - JDK-8225182: JNI exception pending in DestroyXIMCallback of awt_InputMethod.c:1327
2a265a
  - JDK-8225199: [Graal] compiler/jvmci/compilerToVM/IsMatureVsReprofileTest.java fails with -XX:CompileThresholdScaling=0.1
2a265a
  - JDK-8225305: ProblemList java/lang/invoke/VarHandles tests
2a265a
  - JDK-8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java timed out
2a265a
  - JDK-8225430: Replace wildcard address with loopback or local host in tests - part 14
2a265a
  - JDK-8225435: Upgrade IANA Language Subtag Registry to the latest for JDK14
2a265a
  - JDK-8225487: giflib legal file is missing attribution for openbsd-reallocarray.c
2a265a
  - JDK-8225567: Wrong file headers with 8202414 fix changeset
2a265a
  - JDK-8225684: [AOT] vmTestbase/vm/oom/production/AlwaysOOMProduction tests fail with AOTed java.base
2a265a
  - JDK-8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
2a265a
  - JDK-8225797: OldObjectSample event creates unexpected amount of checkpoint data
2a265a
  - JDK-8226381: ProblemList java/lang/reflect/PublicMethods/PublicMethodsTest.java
2a265a
  - JDK-8226406: JVM fails to detect mismatched or corrupt CDS archive
2a265a
  - JDK-8226608: Hide the onjcmd option from the help output
2a265a
  - JDK-8226892: ActionListeners on JRadioButtons don't get notified when selection is changed with arrow keys
2a265a
  - JDK-8227112: exclude compiler/intrinsics/sha/sanity tests from AOT runs
2a265a
  - JDK-8227324: Upgrade to freetype 2.10.1
2a265a
  - JDK-8227528: TestAbortVMOnSafepointTimeout.java failed due to "RuntimeException: 'Safepoint sync time longer than' missing from stdout/stderr"
2a265a
  - JDK-8227645: Some tests in serviceability/sa run with fixed -Xmx values and risk running out of memory
2a265a
  - JDK-8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
2a265a
  - JDK-8227662: freetype seeks to index at the end of the font data
2a265a
  - JDK-8228479: Correct the format of ColorChooserDemoTest
2a265a
  - JDK-8228613: java.security.Provider#getServices order is no longer deterministic
2a265a
  - JDK-8228969: 2019-09-28 public suffix list update
2a265a
  - JDK-8229236: CriticalJNINatives: dll handling should be done in native thread state
2a265a
  - JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
2a265a
  - JDK-8229888: (zipfs) Updating an existing zip file does not preserve original permissions
2a265a
  - JDK-8229994: assert(false) failed: Bad graph detected in get_early_ctrl_for_expensive
2a265a
  - JDK-8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
2a265a
  - JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey cause Exception
2a265a
  - JDK-8230390: Problemlist SA tests with AOT
2a265a
  - JDK-8230400: Missing constant pool entry for a method in stacktrace
2a265a
  - JDK-8230459: Test failed to resume JVMCI CompilerThread
2a265a
  - JDK-8230480: check malloc/calloc results in java.desktop
2a265a
  - JDK-8230597: Update GIFlib library to the 5.2.1
2a265a
  - JDK-8230611: infinite loop in LogOutputList::wait_until_no_readers()
2a265a
  - JDK-8230624: [TESTBUG] Problemlist JFR compiler/TestCodeSweeper.java
2a265a
  - JDK-8230677: Should disable Escape Analysis if JVMTI capability can_get_owned_monitor_info was taken
2a265a
  - JDK-8230926: [macosx] Two apostrophes are entered instead of one with "U.S. International - PC" layout
2a265a
  - JDK-8231025: Incorrect method tag offset for big endian platform
2a265a
  - JDK-8231081: TestMetadataRetention fails due to missing symbol id
2a265a
  - JDK-8231387: java.security.Provider.getService returns random result due to race condition with mutating methods in the same class
2a265a
  - JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
2a265a
  - JDK-8231445: check ZALLOC return values in awt coding
2a265a
  - JDK-8231507: Update Apache Santuario (XML Signature) to version 2.1.4
2a265a
  - JDK-8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call
2a265a
  - JDK-8231753: use more Posix functionality in aix os::print_os_info
2a265a
  - JDK-8231810: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java fails intermittently with "java.lang.Exception: Unexpected EOF"
2a265a
  - JDK-8232003: (fs) Files.write can leak file descriptor in the exception case
2a265a
  - JDK-8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC: Heap too small
2a265a
  - JDK-8232060: add some initializations using sigemptyset in os_aix.cpp
2a265a
  - JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
2a265a
  - JDK-8232167: Visual Studio install found through --with-tools-dir value is discarded
2a265a
  - JDK-8232170: FSInfo#getJarClassPath throws an exception not declared in its throws clause
2a265a
  - JDK-8232200: [macos 10.15] Windows in fullscreen tests jumps around the screen
2a265a
  - JDK-8232207: Linux os::available_memory re-reads cgroup configuration on every invocation
2a265a
  - JDK-8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
2a265a
  - JDK-8232370: Refactor some com.sun.jdi tests to enable IDE integration
2a265a
  - JDK-8232433: [macos 10.15] java/awt/Window/LocationAtScreenCorner/LocationAtScreenCorner.java may fail
2a265a
  - JDK-8232571: Add missing SIGINFO signal
2a265a
  - JDK-8232692: [TESTBUG] compiler/aot/fingerprint/SelfChangedCDS.java fails when cds is disabled
2a265a
  - JDK-8232713: Update BCEL version to 6.3.1 in license file
2a265a
  - JDK-8232806: Introduce a system property to disable eager lambda initialization
2a265a
  - JDK-8232834: RunTest sometimes fails to produce valid exitcode.txt
2a265a
  - JDK-8232880: Update test documentation with additional settings for client UI tooltip tests
2a265a
  - JDK-8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures.
2a265a
  - JDK-8233018: Add a new test to verify that DatagramSocket is not interruptible
2a265a
  - JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong result if Klass* is aligned to 32bit
2a265a
  - JDK-8233032: assert(in_bb(n)) failed: must be
2a265a
  - JDK-8233078: fix minimal VM build on Linux ppc64(le)
2a265a
  - JDK-8233328: fix minimal VM build on Linux s390x
2a265a
  - JDK-8233383: Various minor fixes
2a265a
  - JDK-8233466: aarch64: remove unnecessary load of mdo when profiling return and parameters type
2a265a
  - JDK-8233491: Crash in AdapterHandlerLibrary::get_adapter with CDS due to code cache exhaustion
2a265a
  - JDK-8233529: loopTransform.cpp:2984: Error: assert(p_f->Opcode() == Op_IfFalse) failed
2a265a
  - JDK-8233548: Update CUP to v0.11b
2a265a
  - JDK-8233649: Update ProblemList.txt to exclude failing headful tests on macos
2a265a
  - JDK-8233656: assert(d->is_CFG() && n->is_CFG()) failed: must have CFG nodes
2a265a
  - JDK-8233657: Intermittent NPE in Component.validate()
2a265a
  - JDK-8234288: Turkey Time Zone returns incorrect time zone name
2a265a
  - JDK-8234323: NULL-check return value of SurfaceData_InitOps on macosx
2a265a
  - JDK-8234339: replace JLI_StrTok in java_md_solinux.c
2a265a
  - JDK-8234340: Bump update version for OpenJDK: jdk-11.0.7
2a265a
  - JDK-8234350: assert(mode == ControlAroundStripMined && (use == sfpt || !use->is_reachable_from_root())) failed: missed a node
2a265a
  - JDK-8234386: [macos] NPE was thrown at expanding Choice from maximized frame
2a265a
  - JDK-8234397: add OS uptime information to os::print_os_info output
2a265a
  - JDK-8234423: Modifying ArrayList.subList().subList() resets modCount of subList
2a265a
  - JDK-8234466: Class loading deadlock involving X509Factory#commitEvent()
2a265a
  - JDK-8234501: remove obsolete NET_ReadV
2a265a
  - JDK-8234525: enable link-time section-gc for linux s390x to remove unused code
2a265a
  - JDK-8234610: MaxVectorSize set wrongly when UseAVX=3 is specified after JDK-8221092
2a265a
  - JDK-8234617: C1: Incorrect result of field load due to missing narrowing conversion
2a265a
  - JDK-8234723: javax/net/ssl/TLS tests support TLSv1.3
2a265a
  - JDK-8234724: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java supports TLSv1.3
2a265a
  - JDK-8234741: enhance os::get_core_path on macOS
2a265a
  - JDK-8234769: Duplicate attribution in freetype.md
2a265a
  - JDK-8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
2a265a
  - JDK-8234809: set relro in linker flags when building with gcc
2a265a
  - JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java fails on Windows 10
2a265a
  - JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
2a265a
  - JDK-8235288: AVX 512 instructions inadvertently used on Xeon for small vector width operations
2a265a
  - JDK-8235325: build failure on Linux after 8235243
2a265a
  - JDK-8235383: C1 compilation fails with -XX:+PrintIRDuringConstruction -XX:+Verbose
2a265a
  - JDK-8235489: handle return values of sscanf calls in hotspot
2a265a
  - JDK-8235509: Backport for JDK-8209657 Refactor filemap.hpp to simplify integration with Serviceability Agent.
2a265a
  - JDK-8235510: java.util.zip.CRC32 performance drop after 8200067
2a265a
  - JDK-8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java does not handle archive mapping failure
2a265a
  - JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if prelink is enabled
2a265a
  - JDK-8235671: enhance print_rlimit_info in os_posix
2a265a
  - JDK-8235744: PIT: test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in linux-x64
2a265a
  - JDK-8235904: Infinite loop when rendering huge lines
2a265a
  - JDK-8235998: [c2] Memory leaks during tracing after '8224193: stringStream should not use Resource Area'.
2a265a
  - JDK-8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
2a265a
  - JDK-8236140: assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it
2a265a
  - JDK-8236179: C1 register allocation error with T_ADDRESS
2a265a
  - JDK-8236488: Support for configure option --with-native-debug-symbols=internal is impossible on Windows
2a265a
  - JDK-8236500: Windows ucrt.dll should be looked up in versioned WINSDK subdirectory
2a265a
  - JDK-8236709: struct SwitchRange in HS violates C++ One Definition Rule
2a265a
  - JDK-8236848: [JDK 11u] make run-test-tier1 fails after backport of JDK-8232834
2a265a
  - JDK-8236873: Worker has a deadlock bug
2a265a
  - JDK-8237217: Incorrect G1StringDedupEntry type used in StringDedupTable destructor
2a265a
  - JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
2a265a
  - JDK-8237375: SimpleThresholdPolicy misses CounterDecay timestamp initialization
2a265a
  - JDK-8237508: Simplify JarFile.isInitializing
2a265a
  - JDK-8237540: Missing files in backport of JDK-8210910
2a265a
  - JDK-8237541: Missing files in backport of JDK-8236528
2a265a
  - JDK-8237600: Test SunJSSEFIPSInit fails on Ubuntu
2a265a
  - JDK-8237819: s390x - remove unused pd_zero_to_words_large
2a265a
  - JDK-8237869: exclude jtreg test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java because of instabilities
2a265a
  - JDK-8237879: make 4.3 breaks build
2a265a
  - JDK-8237945: CTW: C2 compilation fails with assert(just_allocated_object(alloc_ctl) == ptr) failed: most recent allo
2a265a
  - JDK-8238225: Issues reported after replacing symlink at Contents/MacOS/libjli.dylib with binary
2a265a
  - JDK-8238247: CTW runner should sweep nmethods more aggressively
2a265a
  - JDK-8238366: CTW runner closes standard output on exit
2a265a
  - JDK-8238438: SuperWord::co_locate_pack picks memory state of first instead of last load
2a265a
  - JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
2a265a
  - JDK-8238534: Deep sign macOS bundles before bundle archive is being created
2a265a
  - JDK-8238591: CTW: Split applications/ctw/modules/jdk_localedata.java
2a265a
  - JDK-8238596: AVX enabled by default for Skylake even when unsupported
2a265a
  - JDK-8238811: C2: assert(i >= req() || i == 0 || is_Region() || is_Phi()) with -XX:+VerifyGraphEdges
2a265a
  - JDK-8239005: [TESTBUG] test/hotspot/jtreg/runtime/StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must initialize static state before calling do_overflow()
2a265a
  - JDK-8239466: Loss of precision in counter decay calculation in 11u backport of JDK-8237375
2a265a
  - JDK-8239856: [ntintel] asserts about copying unaligned array element
2a265a
  - JDK-8240724: [test] jdk11 downport of 8224475 misses binary file test/jdk/javax/swing/JTextPane/arrow.png
2a265a
  - JDK-8241296: Segfault in JNIHandleBlock::oops_do()
2a265a
2a265a
Notes on individual issues:
2a265a
===========================
2a265a
2a265a
security-libs/javax.xml.crypto:
2a265a
2a265a
JDK-8239467: Apache Santuario Library Updated to Version 2.1.4
2a265a
==============================================================
2a265a
The Apache Santuario library has been upgraded to version 2.1.4. As a
2a265a
result, a new system property
2a265a
`com.sun.org.apache.xml.internal.security.parser.pool-size` has been
2a265a
introduced.
2a265a
2a265a
This new system property sets the pool size of the internal
2a265a
`DocumentBuilder` cache used when processing XML Signatures. The
2a265a
function is equivalent to the
2a265a
`org.apache.xml.security.parser.pool-size` system property used in
2a265a
Apache Santuario and has the same default value of 20.