Blame SOURCES/NEWS

411aa8
Key:
411aa8
411aa8
JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X
411aa8
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
411aa8
1eb828
New in release OpenJDK 11.0.11 (2021-04-20):
1eb828
=============================================
1eb828
Live versions of these release notes can be found at:
1eb828
  * https://bitly.com/openjdk11011
1eb828
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.11.txt
1eb828
1eb828
* Security fixes
1eb828
  - JDK-8244473: Contextualize registration for JNDI
1eb828
  - JDK-8244543: Enhanced handling of abstract classes
1eb828
  - JDK-8249906, CVE-2021-2163: Enhance opening JARs
1eb828
  - JDK-8250568, CVE-2021-2161: Less ambiguous processing
1eb828
  - JDK-8253799: Make lists of normal filenames
1eb828
  - JDK-8257001: Improve Http Client Support
1eb828
* Other changes
1eb828
  - JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream readDouble() conversion to long mishandled
1eb828
  - JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection
1eb828
  - JDK-8086003: Test fails on OSX with java.lang.RuntimeException 'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3' missing
1eb828
  - JDK-8168869: jdeps: localized messages don't use proper line breaks
1eb828
  - JDK-8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
1eb828
  - JDK-8202343: Disable TLS 1.0 and 1.1
1eb828
  - JDK-8205992: jhsdb cannot attach to Java processes running in Docker containers
1eb828
  - JDK-8209193: Fix aarch64-linux compilation after -Wreorder changes
1eb828
  - JDK-8210413: AArch64: Optimize div/rem by constant in C1
1eb828
  - JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
1eb828
  - JDK-8211051: jdeps usage of --dot-output doesn't provide valid output for modular jar
1eb828
  - JDK-8211057: Gensrc step CompileProperties generates unstable CompilerProperties output
1eb828
  - JDK-8211150: G1 Full GC not purging code root memory and hence causing memory leak
1eb828
  - JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup delegation when module reads automatic module
1eb828
  - JDK-8212043: Add floating-point Math.min/max intrinsics
1eb828
  - JDK-8212218: [TESTBUG] runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
1eb828
  - JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/WindowsComboBoxSizeTest.java fails in Windows
1eb828
  - JDK-8213909: jdeps --print-module-deps should report missing dependences
1eb828
  - JDK-8214180: Need better granularity for sleeping
1eb828
  - JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed due to missing Lib2 file
1eb828
  - JDK-8214230: Classes generated by SystemModulesPlugin.java are not reproducable
1eb828
  - JDK-8214741: docs/index.html has no title or copyright
1eb828
  - JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed after 8212043
1eb828
  - JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003/TestDescription.java fails
1eb828
  - JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java failed - no KrbException thrown
1eb828
  - JDK-8218550: Add test omitted from JDK-8212043
1eb828
  - JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in JvmtiRawMonitor::raw_exit while posting method exit event
1eb828
  - JDK-8221995: AARCH64: problems with CAS instructions encoding
1eb828
  - JDK-8222518: Remove unnecessary caching of Parker object in java.lang.Thread
1eb828
  - JDK-8222785: aarch64: add necessary masking for immediate shift counts
1eb828
  - JDK-8223186: HotSpot compile warnings from GCC 9
1eb828
  - JDK-8225773: jdeps --check produces NPE if there are missing module dependences
1eb828
  - JDK-8225805: Java Access Bridge does not close the logger
1eb828
  - JDK-8226810: Failed to launch JVM because of NullPointerException occured on System.props
1eb828
  - JDK-8229396: jdeps ignores multi-release when generate-module-info used on command line
1eb828
  - JDK-8229474: Shenandoah: Cleanup CM::update_roots()
1eb828
  - JDK-8232225: Rework the fix for JDK-8071483
1eb828
  - JDK-8232905: JFR fails with assertion: assert(t->unflushed_size() == 0) failed: invariant
1eb828
  - JDK-8233164: C2 fails with assert(phase->C->get_alias_index(t) == phase->C->get_alias_index(t_adr)) failed: correct memory chain
1eb828
  - JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is failing intermittently in nightly lnux-x64 system
1eb828
  - JDK-8233912: aarch64: minor improvements of atomic operations
1eb828
  - JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads non-strong fields with an on-strong load barrier
1eb828
  - JDK-8234742: Improve handshake logging
1eb828
  - JDK-8234796: Refactor Handshake::execute to take a more complex type than ThreadClosure
1eb828
  - JDK-8235324: Dying objects are published from users of CollectedHeap::object_iterate
1eb828
  - JDK-8235351: Lookup::unreflect should bind with the original caller independent of Method's accessible flag
1eb828
  - JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/AttachOnDemand/attach021/TestDescription.java test
1eb828
  - JDK-8237392: Shenandoah: Remove unreliable assertion
1eb828
  - JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
1eb828
  - JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7
1eb828
  - JDK-8239355: (dc) Initial value of SO_SNDBUF should allow sending large datagrams (macOS)
1eb828
  - JDK-8240353: AArch64: missing support for -XX:+ExtendedDTraceProbes in C1
1eb828
  - JDK-8240704: CheckHandles.java failed "AssertionError: Handle use increased by more than 10 percent."
1eb828
  - JDK-8240751: Shenandoah: fold ShenandoahTracer definition
1eb828
  - JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with "assert(store != load->find_exact_control(load->in(0))) failed: dependence cycle found"
1eb828
  - JDK-8241598: Upgrade JLine to 3.14.0
1eb828
  - JDK-8241649: Optimize Character.toString
1eb828
  - JDK-8241770: Module xxxAnnotation() methods throw NCDFE if module-info.class found as resource in unnamed module
1eb828
  - JDK-8241911: AArch64: Fix a potential register clash issue in reduce_add2I
1eb828
  - JDK-8242030: Wrong package declarations in jline classes after JDK-8241598
1eb828
  - JDK-8242565: Policy initialization issues when the denyAfter constraint is enabled
1eb828
  - JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
1eb828
  - JDK-8243670: Unexpected test result caused by C2 MergeMemNode::Ideal
1eb828
  - JDK-8244088: [Regression] Switch of Gnome theme ends up in deadlocked UI
1eb828
  - JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files
1eb828
  - JDK-8244340: Handshake processing thread lacks yielding
1eb828
  - JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown for malformed class file
1eb828
  - JDK-8244683: A TSA server used by tests
1eb828
  - JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java failed with No enum constant
1eb828
  - JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is unused
1eb828
  - JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco agent
1eb828
  - JDK-8245512: CRC32 optimization using AVX512 instructions
1eb828
  - JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos
1eb828
  - JDK-8246707: (sc) SocketChannel.read/write throws AsynchronousCloseException on closed channel
1eb828
  - JDK-8246709: sun/security/tools/jarsigner/TsacertOptionTest.java compilation failed after JDK-8244683
1eb828
  - JDK-8247200: assert((unsigned)fpargs < 32)
1eb828
  - JDK-8247766: [aarch64] guarantee(val < (1U << nbits)) failed: Field too big for insn.
1eb828
  - JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
1eb828
  - JDK-8248865: Document JNDI/LDAP timeout properties
1eb828
  - JDK-8248901: Signed immediate support in .../share/assembler.hpp is broken.
1eb828
  - JDK-8249543: Force DirectBufferAllocTest to run with -ExplicitGCInvokesConcurrent
1eb828
  - JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
1eb828
  - JDK-8249749: modify a primitive array through a stream and a for cycle causes jre crash
1eb828
  - JDK-8249787: Make TestGCLocker more resilient with concurrent GCs
1eb828
  - JDK-8249867: xml declaration is not followed by a newline
1eb828
  - JDK-8250911: [windows] os::pd_map_memory() error detection broken
1eb828
  - JDK-8251255: [linux] Add process-memory information to hs-err and VM.info
1eb828
  - JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier
1eb828
  - JDK-8251925: C2: RenaissanceStressTest fails with assert(!had_error): bad dominance
1eb828
  - JDK-8251944: Add Shenandoah test config to compiler/gcbarriers/UnsafeIntrinsicsTest.java
1eb828
  - JDK-8251992: VM crashed running TestComplexAddrExpr.java test with -XX:UseAVX=X
1eb828
  - JDK-8253220: Epsilon: clean up unused code/declarations
1eb828
  - JDK-8253274: The CycleDMImagetest brokes the system
1eb828
  - JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
1eb828
  - JDK-8253368: TLS connection always receives close_notify exception
1eb828
  - JDK-8255368: Math.exp() gives wrong result for large values on x86 32-bit platforms
1eb828
  - JDK-8255401: Shenandoah: Allow oldval and newval registers to overlap in cmpxchg_oop()
1eb828
  - JDK-8253404: C2: assert(C->live_nodes() <= C->max_node_limit()) failed: Live Node limit exceeded limit
1eb828
  - JDK-8253409: Double-rounding possibility in float fma
1eb828
  - JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities
1eb828
  - JDK-8253524: C2: Refactor code that clones predicates during loop unswitching
1eb828
  - JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff)) failed: unexpected
1eb828
  - JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/MouseEventAfterStartDragTest.html test failed
1eb828
  - JDK-8253702: BigSur version number reported as 10.16, should be 11.nn
1eb828
  - JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
1eb828
  - JDK-8254104: MethodCounters must exist before nmethod is installed
1eb828
  - JDK-8254734: "dead loop detected" assert failure with patch from 8223051
1eb828
  - JDK-8254748: Bad Copyright header format after JDK-8212218
1eb828
  - JDK-8254799: runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryError.java fails with release VMs
1eb828
  - JDK-8255058: C1: assert(is_virtual()) failed: type check
1eb828
  - JDK-8255351: Add detection for Graviton 2 CPUs
1eb828
  - JDK-8255387: Japanese characters were printed upside down on AIX
1eb828
  - JDK-8255479: [aarch64] assert(src->section_index_of(target) == CodeBuffer::SECT_NONE) failed: sanity
1eb828
  - JDK-8255544: Create a checked cast
1eb828
  - JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI()
1eb828
  - JDK-8255681: print callstack in error case in runAWTLoopWithApp
1eb828
  - JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
1eb828
  - JDK-8255742: PrintInlining as compiler directive doesn't print virtual calls
1eb828
  - JDK-8255845: Memory leak in imageFile.cpp
1eb828
  - JDK-8255880: UI of Swing components is not redrawn after their internal state changed
1eb828
  - JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem
1eb828
  - JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset() is incorrect for stub calls
1eb828
  - JDK-8256056: Deoptimization stub doesn't save vector registers on x86
1eb828
  - JDK-8256061: RegisterSaver::save_live_registers() omits upper halves of ZMM0-15 registers
1eb828
  - JDK-8256187: [TEST_BUG] Automate bug4275046.java test
1eb828
  - JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after JDK-8210764 due to mishandled lir_neg
1eb828
  - JDK-8256258: some missing NULL checks or asserts after CodeCache::find_blob_unsafe
1eb828
  - JDK-8256264: Printed GlyphVector outline with low DPI has bad quality on Windows
1eb828
  - JDK-8256290: javac/lambda/T8031967.java fails with StackOverflowError on x86_32
1eb828
  - JDK-8256359: AArch64: runtime/ReservedStack/ReservedStackTestCompiler.java fails
1eb828
  - JDK-8256387: Unexpected result if patching an entire instruction on AArch64
1eb828
  - JDK-8256421: Add 2 HARICA roots to cacerts truststore
1eb828
  - JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for small copies in StubGenerator::copy_memory
1eb828
  - JDK-8256489: Make gtest for long path names on Windows more resilient in the presence of virus scanners
1eb828
  - JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2
1eb828
  - JDK-8256633: Fix product build on Windows+Arm64
1eb828
  - JDK-8256682: JDK-8202343 is incomplete
1eb828
  - JDK-8256751: Incremental rebuild with precompiled header fails when touching a header file
1eb828
  - JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset() for CallLeafNoFP on x86_32
1eb828
  - JDK-8256806: Shenandoah: optimize shenandoah/jni/TestPinnedGarbage.java test
1eb828
  - JDK-8256807: C2: Not marking stores correctly as mismatched in string opts
1eb828
  - JDK-8256810: Incremental rebuild broken on Macosx
1eb828
  - JDK-8256818: SSLSocket that is never bound or connected leaks socket resources
1eb828
  - JDK-8256888: Client manual test problem list update
1eb828
  - JDK-8257083: Security infra test failures caused by JDK-8202343
1eb828
  - JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
1eb828
  - JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
1eb828
  - JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst.testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps is on
1eb828
  - JDK-8257513: C2: assert((constant_addr - _masm.code()->consts()->start()) == con.offset())
1eb828
  - JDK-8257547: Handle multiple prereqs on the same line in deps files
1eb828
  - JDK-8257561: Some code is not vectorized after 8251925 and 8250607
1eb828
  - JDK-8257565: epsilonBarrierSet.hpp should not include barrierSetAssembler
1eb828
  - JDK-8257575: C2: "failed: only phis" assert failure in loop strip mining verification
1eb828
  - JDK-8257594: C2 compiled checkcast of non-null object triggers endless deoptimization/recompilation cycle
1eb828
  - JDK-8257633: Missing -mmacosx-version-min=X flag when linking libjvm
1eb828
  - JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java reports leaks
1eb828
  - JDK-8257707: Fix incorrect format string in Http1HeaderParser
1eb828
  - JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines
1eb828
  - JDK-8257798: [PPC64] undefined reference to Klass::vtable_start_offset()
1eb828
  - JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java as automatic test
1eb828
  - JDK-8257910: [JVMCI] Set exception_seen accordingly in the runtime.
1eb828
  - JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884
1eb828
  - JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region
1eb828
  - JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234
1eb828
  - JDK-8258247: Couple of issues in fix for JDK-8249906
1eb828
  - JDK-8258373: Update the text handling in the JPasswordField
1eb828
  - JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk()
1eb828
  - JDK-8258419: RSA cipher buffer cleanup
1eb828
  - JDK-8258471: "search codecache" clhsdb command does not work
1eb828
  - JDK-8258534: Epsilon: clean up unused includes
1eb828
  - JDK-8258805: Japanese characters not entered by mouse click on Windows 10
1eb828
  - JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
1eb828
  - JDK-8258836: JNI local refs exceed capacity getDiagnosticCommandInfo
1eb828
  - JDK-8258884: [TEST_BUG] Convert applet-based test open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java to a regular java test
1eb828
  - JDK-8259007: This test printed a blank page
1eb828
  - JDK-8259049: Uninitialized variable after JDK-8257513
1eb828
  - JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA to false
1eb828
  - JDK-8259580: Shenandoah: uninitialized label in VerifyThreadGCState
1eb828
  - JDK-8259231: Epsilon: improve performance under contention during virtual space expansion
1eb828
  - JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region"
1eb828
  - JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days
1eb828
  - JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
1eb828
  - JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input
1eb828
  - JDK-8259428: AlgorithmId.getEncodedParams() should return copy
1eb828
  - JDK-8259446: runtime/jni/checked/TestCheckedReleaseArrayElements.java fails with stderr not empty
1eb828
  - JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags
1eb828
  - JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect
1eb828
  - JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543
1eb828
  - JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value
1eb828
  - JDK-8259707: LDAP channel binding does not work with StartTLS extension
1eb828
  - JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
1eb828
  - JDK-8259849: Shenandoah: Rename store-val to IU-barrier
1eb828
  - JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
1eb828
  - JDK-8260029: aarch64: fix typo in verify_oop_array
1eb828
  - JDK-8260308: Update LogCompilation junit to 4.13.1
1eb828
  - JDK-8260338: Some fields in HaltNode is not cloned
1eb828
  - JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS
1eb828
  - JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
1eb828
  - JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports false positive
1eb828
  - JDK-8260497: Shenandoah: Improve SATB flushing
1eb828
  - JDK-8260502: [s390] NativeMovRegMem::verify() fails because it's too strict
1eb828
  - JDK-8260632: Build failures after JDK-8253353
1eb828
  - JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end
1eb828
  - JDK-8261022: Fix incorrect result of Math.abs() with char type
1eb828
  - JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x
1eb828
  - JDK-8261183: Follow on to Make lists of normal filenames
1eb828
  - JDK-8261209: isStandalone property: remove dependency on pretty-print
1eb828
  - JDK-8261231: Windows IME was disabled after DnD operation
1eb828
  - JDK-8261251: Shenandoah: Use object size for full GC humongous compaction
1eb828
  - JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined
1eb828
  - JDK-8261334: NMT: tuning statistic shows incorrect hash distribution
1eb828
  - JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
1eb828
  - JDK-8261522: [PPC64] AES intrinsics write beyond the destination array
1eb828
  - JDK-8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
1eb828
  - JDK-8261585: Restore HandleArea used in Deoptimization::uncommon_trap
1eb828
  - JDK-8261753: Test java/lang/System/OsVersionTest.java still failing on BigSur patch versions after JDK-8253702
1eb828
  - JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java in 11u
1eb828
  - JDK-8261912: Code IfNode::fold_compares_helper more defensively
1eb828
  - JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales
1eb828
  - JDK-8262018: Wrong format in SAP copyright header of OsVersionTest
1eb828
  - JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator
1eb828
1eb828
Notes on individual issues:
1eb828
===========================
1eb828
1eb828
core-libs/javax.naming:
1eb828
1eb828
JDK-8258824: LDAP Channel Binding Support for Java GSS/Kerberos
1eb828
===============================================================
1eb828
A new JNDI environment property "com.sun.jndi.ldap.tls.cbtype" has
1eb828
been added to enable TLS Channel Binding data in LDAP authentication
1eb828
over SSL/TLS protocol to the Windows AD server.  The only valid value
1eb828
at present is "tls-server-end-point", where channel binding data is
1eb828
created on the base of the TLS server certificate. See RFC-5929 [0]
1eb828
and the module description of the `java.naming` module for further
1eb828
details.
1eb828
1eb828
[0] RFC-5929 "Channel Bindings for TLS": https://www.ietf.org/rfc/rfc5929.txt
1eb828
1eb828
security-libs/java.security:
1eb828
1eb828
JDK-8260597: Added 2 HARICA Root CA Certificates
1eb828
================================================
1eb828
The following root certificates have been added to the cacerts truststore:
1eb828
1eb828
Alias Name: haricarootca2015
1eb828
Distinguished Name: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
1eb828
1eb828
Alias Name: haricaeccrootca2015
1eb828
Distinguished Name: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
1eb828
1eb828
security-libs/javax.net.ssl:
1eb828
1eb828
JDK-8256490: Disable TLS 1.0 and 1.1
1eb828
====================================
1eb828
TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer
1eb828
considered secure and have been superseded by more secure and modern
1eb828
versions (TLS 1.2 and 1.3).
1eb828
1eb828
These versions have now been disabled by default. If you encounter
1eb828
issues, you can, at your own risk, re-enable the versions by removing
1eb828
"TLSv1" and/or "TLSv1.1" from the `jdk.tls.disabledAlgorithms`
1eb828
security property in the `java.security` configuration file.
1eb828
1eb828
tools:
1eb828
1eb828
JDK-8214213: jdeps --print-module-deps Reports Transitive Dependencies
1eb828
======================================================================
1eb828
`jdeps --print-module-deps`, `--list-deps`, and `--list-reduce-deps`
1eb828
options have been enhanced as follows.
1eb828
1eb828
1. By default, they perform transitive module dependence analysis on
1eb828
libraries on the class path and module path, both directly and
1eb828
indirectly, as required by the given input JAR files or
1eb828
classes. Previously, they only reported the modules required by the
1eb828
given input JAR files or classes.  The `--no-recursive` option can be
1eb828
used to request non-transitive dependence analysis.
1eb828
1eb828
2. By default, they flag any missing dependency, i.e. not found from
1eb828
class path and module path, as an error.  The `--ignore-missing-deps`
1eb828
option can be used to suppress missing dependence errors. Note that a
1eb828
custom image is created with the list of modules output by jdeps when
1eb828
using the `--ignore-missing-deps` option for a non-modular
1eb828
application. Such an application, running on the custom image, might
1eb828
fail at runtime when missing dependence errors are suppressed.
1eb828
1eb828
xml/jaxp:
1eb828
1eb828
JDK-8249867 XML declaration is not followed by a newline
1eb828
========================================================
1eb828
1eb828
The DOM Load and Save `LSSerializer` does not have an explicit control
1eb828
for whether or not the XML Declaration ends with a newline. In this
1eb828
release, a JDK implementation specific property
1eb828
`http://www.oracle.com/xml/jaxp/properties/isStandalone` and
1eb828
corresponding System property `jdk.xml.isStandalone` are added to
1eb828
control the addition of a newline and act independently without
1eb828
having to set the pretty-print property. This property can be used to
1eb828
reverse the incompatible change introduced in Java SE 7 Update 4 with
1eb828
an update of Xalan 2.7.1 where a newline is omitted when pretty-print
1eb828
is required.
1eb828
1eb828
For details, please refer to the bug report and the java.xml module-summary.
1eb828
1eb828
Usage:
1eb828
1eb828
// to set the property, get an instance of LSSerializer and set it along with pretty-print
1eb828
LSSerializer ser = impl.createLSSerializer();
1eb828
ser.getDomConfig().setParameter("format-pretty-print", true);
1eb828
ser.getDomConfig().setParameter("http://www.oracle.com/xml/jaxp/properties/isStandalone", true);
1eb828
1eb828
// to use the System property, set it before initializing a LSSerializer
1eb828
System.setProperty("jdk.xml.isStandalone", “true”);
1eb828
1eb828
// to clear the property, place the line anywhere after the LSSerializer is initialized
1eb828
System.clearProperty("jdk.xml.isStandalone");
1eb828
700dcb
New in release OpenJDK 11.0.10 (2021-01-19):
700dcb
=============================================
700dcb
Live versions of these release notes can be found at:
700dcb
  * https://bitly.com/openjdk11010
700dcb
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt
700dcb
700dcb
* Security fixes
700dcb
  - JDK-8247619: Improve Direct Buffering of Characters
700dcb
* Other changes
700dcb
  - JDK-6722928: Support SSPI as a native GSS-API provider
700dcb
  - JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
700dcb
  - JDK-8152332: [macosx] JFileChooser cannot be serialized on Mac OS X
700dcb
  - JDK-8161684: [testconf] Add VerifyOops' testing into compiler tiers
700dcb
  - JDK-8171279: Support X25519 and X448 in TLS
700dcb
  - JDK-8173361: various crashes in JvmtiExport::post_compiled_method_load
700dcb
  - JDK-8173658: JvmtiExport::post_class_unload() is broken for non-JavaThread initiators
700dcb
  - JDK-8191006: hsdis disassembler plugin does not compile with binutils 2.29+
700dcb
  - JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
700dcb
  - JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode
700dcb
  - JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
700dcb
  - JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
700dcb
  - JDK-8208483: Add 5 JNDI tests to com/sun/jndi/dns/FactoryTests/
700dcb
  - JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
700dcb
  - JDK-8208665: Amend cross-compilation docs with qemu-debootstrap recipe
700dcb
  - JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
700dcb
  - JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
700dcb
  - JDK-8211450: UndetVar::dup is not copying the kind field to the duplicated instance
700dcb
  - JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL) failed: resolving NULL _value"
700dcb
  - JDK-8212226: SurfaceManager throws "Invalid Image variant" for MultiResolutionImage (Windows)
700dcb
  - JDK-8213400: Support choosing group name in keytool keypair generation
700dcb
  - JDK-8213535: Windows HiDPI html lightweight tooltips are truncated
700dcb
  - JDK-8213698: Improve devkit creation and add support for linux/ppc64/ppc64le/s390x
700dcb
  - JDK-8214025: assert(t->singleton()) failed: must be a constant when ScavengeRootsInCode < 2
700dcb
  - JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java fails because of missing UnlockDiagnosticVMOptions
700dcb
  - JDK-8214787: Zero builds fail with "undefined JavaThread::thread_state()"
700dcb
  - JDK-8215583: Exclude runtime/handshake/HandshakeWalkSuspendExitTest.java
700dcb
  - JDK-8216012: Infinite loop in RSA KeyPairGenerator
700dcb
  - JDK-8216324: GetClassMethods is confused by the presence of default methods in super interfaces
700dcb
  - JDK-8217429: WebSocket over authenticating proxy fails to send Upgrade headers
700dcb
  - JDK-8217976: test/jdk/java/net/httpclient/websocket/WebSocketProxyTest.java fails intermittently
700dcb
  - JDK-8218021: Have jarsigner preserve posix permission attributes
700dcb
  - JDK-8218287: jshell tool: input behavior unstable after 12-ea+24 on Windows
700dcb
  - JDK-8218851: JVM crash in custom classloader stress test, JDK 12 & 13
700dcb
  - JDK-8220420: Cleanup c1_LinearScan
700dcb
  - JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad events to wrong jvmtiEnv
700dcb
  - JDK-8222286: Fix for JDK-8213419 is broken on s390
700dcb
  - JDK-8222527: HttpClient doesn't send HOST header when tunelling HTTP/1.1 through http proxy
700dcb
  - JDK-8222533: jtreg test jdk/internal/platform/cgroup/TestCgroupMetrics.java fails on SLES12.3 linux ppc64le machine
700dcb
  - JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails with exitValue = 137
700dcb
  - JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/tc02t001/TestDescription.java failed
700dcb
  - JDK-8224650: Add tests to support X25519 and X448 in TLS
700dcb
  - JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs
700dcb
  - JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash during initialization on Windows platforms
700dcb
  - JDK-8225687: Newly added sspi.cpp in JDK-6722928 still contains some small errors
700dcb
  - JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100
700dcb
  - JDK-8227275: Within native OOM error handling, assertions may hang the process
700dcb
  - JDK-8227647: [Graal] Test8009761.java fails due to "RuntimeException: static java.lang.Object compiler.uncommontrap.Test8009761.m3(boolean,boolean) not compiled"
700dcb
  - JDK-8229495: SIGILL in C2 generated OSR compilation
700dcb
  - JDK-8230910: libsspi_bridge does not build on Windows 32bit
700dcb
  - JDK-8232114: JVM crashed at imjpapi.dll in native code
700dcb
  - JDK-8234147: Avoid looking up standard charsets in core libraries
700dcb
  - JDK-8234393: [macos] printing ignores printer tray
700dcb
  - JDK-8234863: Increase default value of MaxInlineLevel
700dcb
  - JDK-8235218: Minimal VM is broken after JDK-8173361
700dcb
  - JDK-8235456: Minimal VM is broken after JDK-8212160
700dcb
  - JDK-8235829: graal crashes with Zombie.java test
700dcb
  - JDK-8236124: Minimal VM slowdebug build failed after JDK-8212160
700dcb
  - JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
700dcb
  - JDK-8236944: The legVecZ operand should be limited to zmm0-zmm15 registers
700dcb
  - JDK-8237186: Fix typo in copyright header of java/io/Reader/TransferTo.java
700dcb
  - JDK-8237499: JFR: Include stack trace in the ThreadStart event
700dcb
  - JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
700dcb
  - JDK-8237524: AArch64: String.compareTo() may return incorrect result
700dcb
  - JDK-8237950: C2 compilation fails with "Live Node limit exceeded limit" during ConvI2L::Ideal optimization
700dcb
  - JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read
700dcb
  - JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test
700dcb
  - JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails -XX:+VerifyOops with "verify_oop: rsi: broken oop"
700dcb
  - JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&)
700dcb
  - JDK-8239886: Minimal VM build fails after JDK-8237499
700dcb
  - JDK-8240633: Memory leaks in the implementations of FileChooserUI
700dcb
  - JDK-8240690: Race condition between EDT and BasicDirectoryModel.FilesLoader.run0()
700dcb
  - JDK-8241234: Unify monitor enter/exit runtime entries.
700dcb
  - JDK-8241311: Move some charset mapping tests from closed to open
700dcb
  - JDK-8241797: Add some tests to the problem list
700dcb
  - JDK-8242029: AArch64: skip G1 array copy pre-barrier if marking not active
700dcb
  - JDK-8242335: Additional Tests for RSASSA-PSS
700dcb
  - JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker
700dcb
  - JDK-8242614: cleanup duplicated test ldap server in some com/sun/jndi/ldap/ tests
700dcb
  - JDK-8242846: Bring back test/jdk/tools/jlink/plugins/OrderResourcesPluginTest.java
700dcb
  - JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
700dcb
  - JDK-8243290: Improve diagnostic messages for class verification and redefinition failures
700dcb
  - JDK-8243488: Add tests for set/get SendBufferSize and getReceiveBufferSize in DatagramSocket
700dcb
  - JDK-8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA
700dcb
  - JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test uses wrong class
700dcb
  - JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java test misses -version
700dcb
  - JDK-8244142: some hotspot/runtime tests don't check exit code of forked JVM
700dcb
  - JDK-8244278: Excessive code cache flushes and sweeps
700dcb
  - JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/Test8237524.java fails with --illegal-access=deny
700dcb
  - JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building with Xcode 11
700dcb
  - JDK-8244819: hsdis does not compile with binutils 2.34+
700dcb
  - JDK-8245051: c1 is broken if it is compiled by gcc without -fno-lifetime-dse
700dcb
  - JDK-8245168: jlink should not be treated as a "small" tool
700dcb
  - JDK-8245400: Upgrade to LittleCMS 2.11
700dcb
  - JDK-8246381: VM crashes with "Current BasicObjectLock* below than low_mark"
700dcb
  - JDK-8246434: Threads::print_on_error assumes that the heap has been set up
700dcb
  - JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480
700dcb
  - JDK-8247201: Print potential pointer value of readable stack memory in hs_err file
700dcb
  - JDK-8247763: assert(outer->outcnt() == 2) failed: 'only phis' failure in LoopNode::verify_strip_mined()
700dcb
  - JDK-8247867: Upgrade to freetype 2.10.2
700dcb
  - JDK-8248190: Enable Power10 system and implement new byte-reverse instructions
700dcb
  - JDK-8248226: TestCloneAccessStressGCM fails with -XX:-ReduceBulkZeroing
700dcb
  - JDK-8248347: windows build broken by JDK-8243114
700dcb
  - JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
700dcb
  - JDK-8248552: C2 crashes with SIGFPE due to division by zero
700dcb
  - JDK-8248596: [TESTBUG] compiler/loopopts/PartialPeelingUnswitch.java times out with Graal enabled
700dcb
  - JDK-8248745: Add jarsigner and keytool tests for restricted algorithms
700dcb
  - JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
700dcb
  - JDK-8248845: AArch64: stack corruption after spilling vector register
700dcb
  - JDK-8249176: Update GlobalSignR6CA test certificates
700dcb
  - JDK-8249183: JVM crash in "AwtFrame::WmSize" method
700dcb
  - JDK-8249192: MonitorInfo stores raw oops across safepoints
700dcb
  - JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions allowed
700dcb
  - JDK-8249603: C1: assert(has_error == false) failed: register allocation invalid
700dcb
  - JDK-8249605: C2: assert(no_dead_loop) failed: dead loop detected
700dcb
  - JDK-8249607: C2: assert(!had_error) failed: bad dominance
700dcb
  - JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint
700dcb
  - JDK-8249672: Include microcode revision in features_string on x86
700dcb
  - JDK-8249748: gtest silently ignores bad jvm arguments
700dcb
  - JDK-8249821: Separate libharfbuzz from libfontmanager
700dcb
  - JDK-8250598: Hyper-V is detected in spite of running on host OS
700dcb
  - JDK-8250605: Linux x86_32 builds fail after JDK-8249821
700dcb
  - JDK-8250636: iso8601_time returns incorrect offset part on MacOS
700dcb
  - JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY
700dcb
  - JDK-8250772: Test com/sun/jndi/ldap/NamingExceptionMessageTest.java fails intermittently with javax.naming.ServiceUnavailableException
700dcb
  - JDK-8250825: C2 crashes with assert(field != __null) failed: missing field
700dcb
  - JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz
700dcb
  - JDK-8250928: JFR: Improve hash algorithm for stack traces
700dcb
  - JDK-8250968: Symlinks attributes not preserved when using jarsigner on zip files
700dcb
  - JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
700dcb
  - JDK-8251118: BiasedLocking::preserve_marks should not have a HandleMark
700dcb
  - JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java failed due to timeout
700dcb
  - JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes target VM
700dcb
  - JDK-8251365: Build failure on AIX after 8250636
700dcb
  - JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
700dcb
  - JDK-8251456: [TESTBUG] compiler/vectorization/TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
700dcb
  - JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
700dcb
  - JDK-8251535: Partial peeling at unsigned test adds incorrect loop exit check
700dcb
  - JDK-8251949: ZGC: Set explicit heap size for compiler/gcbarriers tests
700dcb
  - JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9)
700dcb
  - JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
700dcb
  - JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
700dcb
  - JDK-8252497: Incorrect numeric currency code for ROL
700dcb
  - JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
700dcb
  - JDK-8252679: Two windows specific FileDIalog tests may fail on some Windows_Server_2016_Standard
700dcb
  - JDK-8252696: Loop unswitching may cause out of bound array load to be executed
700dcb
  - JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
700dcb
  - JDK-8253219: Epsilon: clean up unnecessary includes
700dcb
  - JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
700dcb
  - JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
700dcb
  - JDK-8253269: The CheckCommonColors test should provide more info on failure
700dcb
  - JDK-8253284: Zero OrderAccess barrier mappings are incorrect
700dcb
  - JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
700dcb
  - JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
700dcb
  - JDK-8253791: Issue with useAppleColor check in CSystemColors.m
700dcb
  - JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
700dcb
  - JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
700dcb
  - JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
700dcb
  - JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp
700dcb
  - JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
700dcb
  - JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
700dcb
  - JDK-8254190: [s390] interpreter misses exception check after calling monitorenter
700dcb
  - JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
700dcb
  - JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
700dcb
  - JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
700dcb
  - JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
700dcb
  - JDK-8255065: Zero: accessor_entry misses the IRIW case
700dcb
  - JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
700dcb
  - JDK-8255269: Unsigned overflow in g1Policy.cpp
700dcb
  - JDK-8255365: Problem list failing client manual tests
700dcb
  - JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
700dcb
  - JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
700dcb
  - JDK-8255550: x86: Assembler::cmpq(Address dst, Register src) encoding is incorrect
700dcb
  - JDK-8255603: Memory/Performance regression after JDK-8210985
700dcb
  - JDK-8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback
700dcb
  - JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/StreamFlush.java
700dcb
  - JDK-8256427: Test com/sun/jndi/dns/ConfigTests/PortUnreachable.java does not work on AIX
700dcb
  - JDK-8256452: Integrate missing part of JDK-8232370 to 11u
700dcb
  - JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/libOverpassMethods.c fails to compile on gcc 4.4.x
700dcb
  - JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to -Wl,-z,defs
700dcb
  - JDK-8256618: Zero: Linux x86_32 build still fails
700dcb
  - JDK-8256736: Zero: GTest tests fail with "unsuppported vm variant"
700dcb
  - JDK-8256809: Annotation processing causes NPE during flow analysis
700dcb
  - JDK-8257181: s390x builds are very noisy with gc-sections messages
700dcb
  - JDK-8257242: [macOS] Java app crashes while switching input methods
700dcb
  - JDK-8257545: SunJSSE FIPS regression in key exchange after JDK-8171279 11u backport
700dcb
  - JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false
700dcb
  - JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays
700dcb
  - JDK-8258630: Add expiry exception for QuoVadis root certificate
700dcb
700dcb
Notes on individual issues:
700dcb
===========================
700dcb
700dcb
security-libs/java.security:
700dcb
700dcb
JDK-8213821: -groupname Option Added to keytool Key Pair Generation
700dcb
===================================================================
700dcb
A new `-groupname` option has been added to `keytool -genkeypair` so
700dcb
that a user can specify a named group when generating a key pair. For
700dcb
example, `keytool -genkeypair -keyalg EC -groupname secp384r1` will
700dcb
generate an EC key pair by using the `secp384r1` curve. Because there
700dcb
might be multiple curves with the same size, using the `-groupname`
700dcb
option is preferred over the `-keysize` option.
700dcb
700dcb
JDK-8248263: jarsigner Preserves POSIX File Permission and symlink Attributes
700dcb
=============================================================================
700dcb
When signing a file that contains POSIX file permission or symlink
700dcb
attributes, `jarsigner` now preserves these attributes in the newly
700dcb
signed file but warns that these attributes are unsigned and not
700dcb
protected by the signature. The same warning is printed during the
700dcb
`jarsigner -verify` operation for such files.
700dcb
700dcb
Note that the `jar` tool does not read/write these attributes. This
700dcb
change is more visible to tools like `unzip` where these attributes
700dcb
are preserved.
700dcb
700dcb
security-libs/javax.net.ssl:
700dcb
700dcb
JDK-8225764:  Support for X25519 and X448 in TLS
700dcb
================================================
700dcb
700dcb
The named elliptic curve groups `x25519` and `x448` are now available
700dcb
for JSSE key agreement in TLS versions 1.0 to 1.3, with `x25519` being
700dcb
the most preferred of the default enabled named groups.  The default
700dcb
ordered list is now:
700dcb
700dcb
* x25519
700dcb
* secp256r1
700dcb
* secp384r1
700dcb
* secp521r1
700dcb
* x448
700dcb
* secp256k1
700dcb
* ffdhe2048
700dcb
* ffdhe3072
700dcb
* ffdhe4096
700dcb
* ffdhe6144
700dcb
* ffdhe8192
700dcb
700dcb
The default list can be overridden using the system property *`jdk.tls.namedGroups`*.
700dcb
700dcb
security-libs/org.ietf.jgss:
700dcb
700dcb
JDK-8214079: Added a Default Native GSS-API Library on Windows
700dcb
==============================================================
700dcb
A native GSS-API library has been added to JDK on the Windows
700dcb
platform. The library is client-side only and uses the default
700dcb
credentials. It will be loaded when the `sun.security.jgss.native`
700dcb
system property is set to "true". A user can still load a third-party
700dcb
native GSS-API library by setting the system property
700dcb
`sun.security.jgss.lib` to its path.
700dcb
700dcb
New in release OpenJDK 11.0.9.1 (2020-10-20):
700dcb
=============================================
700dcb
Live versions of these release notes can be found at:
700dcb
  * https://bitly.com/openjdk11091
700dcb
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.1.txt
700dcb
700dcb
* Regression fixes
700dcb
  - JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
700dcb
3fa52e
New in release OpenJDK 11.0.9 (2020-10-20):
3fa52e
===========================================
3fa52e
Live versions of these release notes can be found at:
3fa52e
  * https://bitly.com/openjdk1109
3fa52e
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt
3fa52e
3fa52e
* Security fixes
3fa52e
  - JDK-8233624: Enhance JNI linkage
3fa52e
  - JDK-8236196: Improve string pooling
3fa52e
  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
3fa52e
  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
3fa52e
  - JDK-8237995, CVE-2020-14782: Enhance certificate processing
3fa52e
  - JDK-8240124: Better VM Interning
3fa52e
  - JDK-8241114, CVE-2020-14792: Better range handling
3fa52e
  - JDK-8242680, CVE-2020-14796: Improved URI Support
3fa52e
  - JDK-8242685, CVE-2020-14797: Better Path Validation
3fa52e
  - JDK-8242695, CVE-2020-14798: Enhanced buffer support
3fa52e
  - JDK-8243302: Advanced class supports
3fa52e
  - JDK-8244136, CVE-2020-14803: Improved Buffer supports
3fa52e
  - JDK-8244479: Further constrain certificates
3fa52e
  - JDK-8244955: Additional Fix for JDK-8240124
3fa52e
  - JDK-8245407: Enhance zoning of times
3fa52e
  - JDK-8245412: Better class definitions
3fa52e
  - JDK-8245417: Improve certificate chain handling
3fa52e
  - JDK-8248574: Improve jpeg processing
3fa52e
  - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
3fa52e
  - JDK-8253019: Enhanced JPEG decoding
3fa52e
* Other changes
3fa52e
  - JDK-6532025: GIF reader throws misleading exception with truncated images
3fa52e
  - JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/PDialogTest.java needs update by removing a infinite loop
3fa52e
  - JDK-8022535: [TEST BUG] javax/swing/text/html/parser/Test8017492.java fails
3fa52e
  - JDK-8062947: Fix exception message to correctly represent LDAP connection failure
3fa52e
  - JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
3fa52e
  - JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/CloseServerSocket.java fails intermittently with Address already in use
3fa52e
  - JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect
3fa52e
  - JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider
3fa52e
  - JDK-8172404: Tools should warn if weak algorithms are used before restricting them
3fa52e
  - JDK-8193367: Annotated type variable bounds crash javac
3fa52e
  - JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset
3fa52e
  - JDK-8203026: java.rmi.NoSuchObjectException: no such object in table
3fa52e
  - JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called
3fa52e
  - JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass
3fa52e
  - JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout
3fa52e
  - JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java
3fa52e
  - JDK-8204963: javax.swing.border.TitledBorder has a memory leak
3fa52e
  - JDK-8204994: SA might fail to attach to process with "Windbg Error: WaitForEvent failed"
3fa52e
  - JDK-8205534: Remove SymbolTable dependency from serviceability agent
3fa52e
  - JDK-8206309: Tier1 SA tests fail
3fa52e
  - JDK-8208281: java/nio/channels/AsynchronousSocketChannel/Basic.java timed out
3fa52e
  - JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1
3fa52e
  - JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect
3fa52e
  - JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent!
3fa52e
  - JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful
3fa52e
  - JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
3fa52e
  - JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
3fa52e
  - JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
3fa52e
  - JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
3fa52e
  - JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code
3fa52e
  - JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
3fa52e
  - JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
3fa52e
  - JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
3fa52e
  - JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
3fa52e
  - JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout
3fa52e
  - JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
3fa52e
  - JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
3fa52e
  - JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
3fa52e
  - JDK-8211694: JShell: Redeclared variable should be reset
3fa52e
  - JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent
3fa52e
  - JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest
3fa52e
  - JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55
3fa52e
  - JDK-8212807: tools/jar/multiRelease/Basic.java times out
3fa52e
  - JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
3fa52e
  - JDK-8213214: Set -Djava.io.tmpdir= when running tests
3fa52e
  - JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found
3fa52e
  - JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
3fa52e
  - JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
3fa52e
  - JDK-8214074: Ghash optimization using AVX instructions
3fa52e
  - JDK-8214491: Upgrade to JLine 3.9.0
3fa52e
  - JDK-8214797: TestJmapCoreMetaspace.java timed out
3fa52e
  - JDK-8215243: JShell tests failing intermitently with \"Problem cleaning up the following threads:\"
3fa52e
  - JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
3fa52e
  - JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
3fa52e
  - JDK-8215438: jshell tool: Ctrl-D causes EOF
3fa52e
  - JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows
3fa52e
  - JDK-8216974: HttpConnection not returned to the pool after 204 response
3fa52e
  - JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time
3fa52e
  - JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
3fa52e
  - JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
3fa52e
  - JDK-8221658: aarch64: add necessary predicate for ubfx patterns
3fa52e
  - JDK-8221759: Crash when completing \"java.io.File.path\"
3fa52e
  - JDK-8221918: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails: Shared archive not found
3fa52e
  - JDK-8222074: Enhance auto vectorization for x86
3fa52e
  - JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp
3fa52e
  - JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command
3fa52e
  - JDK-8223688: JShell: crash on the instantiation of raw anonymous class
3fa52e
  - JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error
3fa52e
  - JDK-8223940: Private key not supported by chosen signature algorithm
3fa52e
  - JDK-8224184: jshell got IOException at exiting with AIX
3fa52e
  - JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc
3fa52e
  - JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException
3fa52e
  - JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions
3fa52e
  - JDK-8226536: Catch OOM from deopt that fails rematerializing objects
3fa52e
  - JDK-8226575: OperatingSystemMXBean should be made container aware
3fa52e
  - JDK-8226697: Several tests which need the @key headful keyword are missing it.
3fa52e
  - JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous
3fa52e
  - JDK-8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
3fa52e
  - JDK-8227269: Slow class loading when running with JDWP
3fa52e
  - JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
3fa52e
  - JDK-8228448: Jconsole can't connect to itself
3fa52e
  - JDK-8228967: Trust/Key store and SSL context utilities for tests
3fa52e
  - JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
3fa52e
  - JDK-8229815: Upgrade Jline to 3.12.1
3fa52e
  - JDK-8230000: some httpclients testng tests run zero test
3fa52e
  - JDK-8230002: javax/xml/jaxp/unittest/transform/SecureProcessingTest.java runs zero test
3fa52e
  - JDK-8230010: Remove jdk8037819/BasicTest1.java
3fa52e
  - JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter
3fa52e
  - JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
3fa52e
  - JDK-8230767: FlightRecorderListener returns null recording
3fa52e
  - JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
3fa52e
  - JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
3fa52e
  - JDK-8231586: enlarge encoding space for OopMapValue offsets
3fa52e
  - JDK-8231953: Wrong assumption in assertion in oop::register_oop
3fa52e
  - JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes
3fa52e
  - JDK-8232083: Minimal VM is broken after JDK-8231586
3fa52e
  - JDK-8232161: Align some one-way conversion in MS950 charset with Windows
3fa52e
  - JDK-8232855: jshell missing word in /help help
3fa52e
  - JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration
3fa52e
  - JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
3fa52e
  - JDK-8233386: Initialize NULL fields for unused decorations
3fa52e
  - JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
3fa52e
  - JDK-8233686: XML transformer uses excessive amount of memory
3fa52e
  - JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions
3fa52e
  - JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment
3fa52e
  - JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
3fa52e
  - JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
3fa52e
  - JDK-8234058: runtime/CompressedOops/CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
3fa52e
  - JDK-8234149: Several regression tests do not dispose Frame at end
3fa52e
  - JDK-8234347: "Turkey" meta time zone does not generate composed localized names
3fa52e
  - JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/bug6980209.java fails in linux nightly
3fa52e
  - JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC
3fa52e
  - JDK-8234541: C1 emits an empty message when it inlines successfully
3fa52e
  - JDK-8234687: change javap reporting on unknown attributes
3fa52e
  - JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
3fa52e
  - JDK-8236548: Localized time zone name inconsistency between English and other locales
3fa52e
  - JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
3fa52e
  - JDK-8237182: Update copyright header for shenandoah and epsilon files
3fa52e
  - JDK-8237888: security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
3fa52e
  - JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
3fa52e
  - JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
3fa52e
  - JDK-8238284: [macos] Zero VM build fails due to an obvious typo
3fa52e
  - JDK-8238380: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10
3fa52e
  - JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c "multiple definition" link errors with GCC10
3fa52e
  - JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10
3fa52e
  - JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
3fa52e
  - JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
3fa52e
  - JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), "should be non-static concrete method");
3fa52e
  - JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
3fa52e
  - JDK-8240169: javadoc fails to link to non-modular api docs
3fa52e
  - JDK-8240295: hs_err elapsed time in seconds is not accurate enough
3fa52e
  - JDK-8240360: NativeLibraryEvent has wrong library name on Linux
3fa52e
  - JDK-8240676: Meet not symmetric failure when running lucene on jdk8
3fa52e
  - JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
3fa52e
  - JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
3fa52e
  - JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows
3fa52e
  - JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException
3fa52e
  - JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
3fa52e
  - JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
3fa52e
  - JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME
3fa52e
  - JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
3fa52e
  - JDK-8241750: x86_32 build failure after JDK-8227269
3fa52e
  - JDK-8242184: CRL generation error with RSASSA-PSS
3fa52e
  - JDK-8242283: Can't start JVM when java home path includes non-ASCII character
3fa52e
  - JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
3fa52e
  - JDK-8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
3fa52e
  - JDK-8243138: Enhance BaseLdapServer to support starttls extended request
3fa52e
  - JDK-8243320: Add SSL root certificates to Oracle Root CA program
3fa52e
  - JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
3fa52e
  - JDK-8243389: enhance os::pd_print_cpu_info on linux
3fa52e
  - JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment
3fa52e
  - JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
3fa52e
  - JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions
3fa52e
  - JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows)
3fa52e
  - JDK-8244087: 2020-04-24 public suffix list update
3fa52e
  - JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26
3fa52e
  - JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base
3fa52e
  - JDK-8244196: adjust output in os_linux
3fa52e
  - JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in
3fa52e
  - JDK-8244287: JFR: Methods samples have line number 0
3fa52e
  - JDK-8244703: "platform encoding not initialized" exceptions with debugger, JNI
3fa52e
  - JDK-8244719: CTW: C2 compilation fails with "assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it"
3fa52e
  - JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb
3fa52e
  - JDK-8244763: Update --release 8 symbol information after JSR 337 MR3
3fa52e
  - JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor
3fa52e
  - JDK-8245151: jarsigner should not raise duplicate warnings on verification
3fa52e
  - JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
3fa52e
  - JDK-8245714: "Bad graph detected in build_loop_late" when loads are pinned on loop limit check uncommon branch
3fa52e
  - JDK-8245801: StressRecompilation triggers assert "redundunt OSR recompilation detected. memory leak in CodeCache!"
3fa52e
  - JDK-8245832: JDK build make-static-libs should build all JDK libraries
3fa52e
  - JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan
3fa52e
  - JDK-8245981: Upgrade to jQuery 3.5.1
3fa52e
  - JDK-8246027: Minimal fastdebug build broken after JDK-8245801
3fa52e
  - JDK-8246094: [macos] Sound Recording and playback is not working
3fa52e
  - JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode
3fa52e
  - JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
3fa52e
  - JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError
3fa52e
  - JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
3fa52e
  - JDK-8246330: Add TLS Tests for Legacy ECDSA curves
3fa52e
  - JDK-8246453: TestClone crashes with "all collected exceptions must come from the same place"
3fa52e
  - JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods
3fa52e
  - JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node
3fa52e
  - JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code
3fa52e
  - JDK-8247615: Initialize the bytes left for the heap sampler
3fa52e
  - JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand
3fa52e
  - JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&'
3fa52e
  - JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
3fa52e
  - JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention
3fa52e
  - JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
3fa52e
  - JDK-8248348: Regression caused by the update to BCEL 6.0
3fa52e
  - JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1
3fa52e
  - JDK-8248495: [macos] zerovm is broken due to libffi headers location
3fa52e
  - JDK-8248851: CMS: Missing memory fences between free chunk check and klass read
3fa52e
  - JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows
3fa52e
  - JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650
3fa52e
  - JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.
3fa52e
  - JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel
3fa52e
  - JDK-8249255: Build fails if source code in cygwin home dir
3fa52e
  - JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
3fa52e
  - JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList
3fa52e
  - JDK-8249560: Shenandoah: Fix racy GC request handling
3fa52e
  - JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
3fa52e
  - JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
3fa52e
  - JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
3fa52e
  - JDK-8250609: C2 crash in IfNode::fold_compares
3fa52e
  - JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics
3fa52e
  - JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
3fa52e
  - JDK-8250787: Provider.put no longer registering aliases in FIPS env
3fa52e
  - JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM
3fa52e
  - JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk
3fa52e
  - JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds
3fa52e
  - JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
3fa52e
  - JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure
3fa52e
  - JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
3fa52e
  - JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
3fa52e
  - JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase
3fa52e
  - JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
3fa52e
  - JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility
3fa52e
  - JDK-8252258: [11u] JDK-8242154 changes the default vendor
3fa52e
  - JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011
3fa52e
  - JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11
3fa52e
  - JDK-8253283: [11u] Test build/translations/VerifyTranslations.java failing after JDK-8252258
3fa52e
  - JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
3fa52e
3fa52e
Notes on individual issues:
3fa52e
===========================
3fa52e
3fa52e
core-libs/java.nio.charsets:
3fa52e
3fa52e
JDK-8240196: Modified the MS950 charset Encoder's Conversion Table
3fa52e
==================================================================
3fa52e
In this release, some of the one-way byte-to-char mappings have been
3fa52e
aligned with the preferred mappings provided by the Unicode Consortium
3fa52e
(https://unicode.org/Public/MAPPINGS/VENDORS/MICSFT/WindowsBestFit/bestfit950.txt).
3fa52e
3fa52e
core-libs/java.util:i18n:
3fa52e
3fa52e
JDK-8238914: Localized Time Zone Name Inconsistency Between English and Other Locales
3fa52e
=====================================================================================
3fa52e
English time zone names provided by the CLDR locale provider are now
3fa52e
correctly synthesized following the CLDR spec, rather than substituted
3fa52e
from the COMPAT provider. For example, SHORT style names are no longer
3fa52e
synthesized abbreviations of LONG style names, but instead produce GMT
3fa52e
offset formats.
3fa52e
3fa52e
core-svc/java.lang.management:
3fa52e
3fa52e
JDK-8236876: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data
3fa52e
============================================================================================
3fa52e
When executing in a container, or other virtualized operating
3fa52e
environment, the following `OperatingSystemMXBean` methods in this
3fa52e
release return container specific information, if
3fa52e
available. Otherwise, they return host specific data:
3fa52e
3fa52e
* getFreePhysicalMemorySize()
3fa52e
* getTotalPhysicalMemorySize()
3fa52e
* getFreeSwapSpaceSize()
3fa52e
* getTotalSwapSpaceSize()
3fa52e
* getSystemCpuLoad()
3fa52e
3fa52e
security-libs/java.security:
3fa52e
3fa52e
JDK-8250756: Added Entrust Root Certification Authority - G4 certificate
3fa52e
========================================================================
3fa52e
The Entrust root certificate has been added to the cacerts truststore:
3fa52e
3fa52e
Alias Name: entrustrootcag4
3fa52e
Distinguished Name: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,  Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
3fa52e
3fa52e
JDK-8250860: Added 3 SSL Corporation Root CA Certificates
3fa52e
=========================================================
3fa52e
The following root certificates have been added to the cacerts truststore for the SSL Corporation:
3fa52e
3fa52e
Alias Name: sslrootrsaca
3fa52e
Distinguished Name: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
3fa52e
3fa52e
Alias Name: sslrootevrsaca
3fa52e
Distinguished Name: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
3fa52e
3fa52e
Alias Name: sslrooteccca
3fa52e
Distinguished Name: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
3fa52e
3fa52e
JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default
3fa52e
===================================================================================
3fa52e
Weak named curves are disabled by default by adding them to the
3fa52e
following `disabledAlgorithms` security properties:
3fa52e
3fa52e
* jdk.tls.disabledAlgorithms
3fa52e
* jdk.certpath.disabledAlgorithms
3fa52e
* jdk.jar.disabledAlgorithms
3fa52e
3fa52e
Red Hat has always disabled many of the curves provided by upstream,
3fa52e
so the only addition in this release is:
3fa52e
3fa52e
* secp256k1
3fa52e
3fa52e
The curves that remain enabled are:
3fa52e
3fa52e
* secp256r1
3fa52e
* secp384r1
3fa52e
* secp521r1
3fa52e
* X25519
3fa52e
* X448
3fa52e
3fa52e
When large numbers of weak named curves need to be disabled, adding
3fa52e
individual named curves to each `disabledAlgorithms` property would be
3fa52e
overwhelming. To relieve this, a new security property,
3fa52e
`jdk.disabled.namedCurves`, is implemented that can list the named
3fa52e
curves common to all of the `disabledAlgorithms` properties. To use
3fa52e
the new property in the `disabledAlgorithms` properties, precede the
3fa52e
full property name with the keyword `include`.  Users can still add
3fa52e
individual named curves to `disabledAlgorithms` properties separate
3fa52e
from this new property.  No other properties can be included in the
3fa52e
`disabledAlgorithms` properties.
3fa52e
3fa52e
To restore the named curves, remove the `include
3fa52e
jdk.disabled.namedCurves` either from specific or from all
3fa52e
`disabledAlgorithms` security properties. To restore one or more
3fa52e
curves, remove the specific named curve(s) from the
3fa52e
`jdk.disabled.namedCurves` property.
3fa52e
3fa52e
JDK-8244286: Tools Warn If Weak Algorithms Are Used Before Restricting Them
3fa52e
===========================================================================
3fa52e
The `keytool` and `jarsigner` tools have been updated to warn users
3fa52e
about weak cryptographic algorithms being used before they are
3fa52e
disabled. In this release, the tools issue warnings for the SHA-1 hash
3fa52e
algorithm and 1024-bit RSA/DSA keys.
3fa52e
3fa52e
security-libs/javax.net.ssl:
3fa52e
3fa52e
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
3fa52e
=========================================================================
3fa52e
Two new system properties have been added to customize the TLS
3fa52e
signature schemes in JDK. `jdk.tls.client.SignatureSchemes` has been
3fa52e
added for the TLS client side, and `jdk.tls.server.SignatureSchemes`
3fa52e
has been added for the server side.
3fa52e
3fa52e
Each system property contains a comma-separated list of supported
3fa52e
signature scheme names specifying the signature schemes that could be
3fa52e
used for the TLS connections.
3fa52e
3fa52e
The names are described in the "Signature Schemes" section of the
3fa52e
*Java Security Standard Algorithm Names Specification*.
3fa52e
3fa52e
security-libs/javax.security:
3fa52e
3fa52e
JDK-8242059: Support for canonicalize in krb5.conf
3fa52e
==================================================
3fa52e
3fa52e
The 'canonicalize' flag in the [krb5.conf file][0] is now supported by
3fa52e
the JDK Kerberos implementation. When set to *true*, RFC 6806 [1] name
3fa52e
canonicalization is requested by clients in TGT requests to KDC
3fa52e
services (AS protocol). Otherwise, and by default, it is not
3fa52e
requested.
3fa52e
3fa52e
The new default behavior is different from previous releases where
3fa52e
name canonicalization was always requested by clients in TGT requests
3fa52e
to KDC services (provided that support for RFC 6806[1] was not
3fa52e
explicitly disabled with the *sun.security.krb5.disableReferrals*
3fa52e
system or security properties).
3fa52e
3fa52e
[0]: https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html
3fa52e
[1]: https://tools.ietf.org/html/rfc6806
3fa52e
3fa52e
JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b
3fa52e
====================================================================
3fa52e
Following JDK's update to tzdata2020b, the long-obsolete files
3fa52e
pacificnew and systemv have been removed. As a result, the
3fa52e
"US/Pacific-New" zone name declared in the pacificnew data file is no
3fa52e
longer available for use.
3fa52e
3fa52e
Information regarding the update can be viewed at
3fa52e
https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html
3fa52e
411aa8
New in release OpenJDK 11.0.8 (2020-07-14):
411aa8
===========================================
411aa8
Live versions of these release notes can be found at:
411aa8
  * https://bitly.com/oj1108
411aa8
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.8.txt
411aa8
411aa8
* Security fixes
411aa8
  - JDK-8230613: Better ASCII conversions
411aa8
  - JDK-8231800: Better listing of arrays
411aa8
  - JDK-8232014: Expand DTD support
411aa8
  - JDK-8233234: Better Zip Naming
411aa8
  - JDK-8233239, CVE-2020-14562: Enhance TIFF support
411aa8
  - JDK-8233255: Better Swing Buttons
411aa8
  - JDK-8234032: Improve basic calendar services
411aa8
  - JDK-8234042: Better factory production of certificates
411aa8
  - JDK-8234418: Better parsing with CertificateFactory
411aa8
  - JDK-8234836: Improve serialization handling
411aa8
  - JDK-8236191: Enhance OID processing
411aa8
  - JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
411aa8
  - JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
411aa8
  - JDK-8237592, CVE-2020-14577: Enhance certificate verification
411aa8
  - JDK-8238002, CVE-2020-14581: Better matrix operations
411aa8
  - JDK-8238013: Enhance String writing
411aa8
  - JDK-8238804: Enhance key handling process
411aa8
  - JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
411aa8
  - JDK-8238843: Enhanced font handing
411aa8
  - JDK-8238920, CVE-2020-14583: Better Buffer support
411aa8
  - JDK-8238925: Enhance WAV file playback
411aa8
  - JDK-8240119, CVE-2020-14593: Less Affine Transformations
411aa8
  - JDK-8240482: Improved WAV file playback
411aa8
  - JDK-8241379: Update JCEKS support
411aa8
  - JDK-8241522: Manifest improved jar headers redux
411aa8
  - JDK-8242136, CVE-2020-14621: Better XML namespace handling
411aa8
* Other changes
411aa8
  - JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
411aa8
  - JDK-7124307: JSpinner and changing value by mouse
411aa8
  - JDK-8022574: remove HaltNode code after uncommon trap calls
411aa8
  - JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
411aa8
  - JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
411aa8
  - JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
411aa8
  - JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo
411aa8
  - JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly
411aa8
  - JDK-8080353: JShell: Better error message on attempting to add default method
411aa8
  - JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled
411aa8
  - JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
411aa8
  - JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout
411aa8
  - JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily
411aa8
  - JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping
411aa8
  - JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
411aa8
  - JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
411aa8
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
411aa8
  - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
411aa8
  - JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently
411aa8
  - JDK-8191930: [Graal] emits unparseable XML into compile log
411aa8
  - JDK-8193879: Java debugger hangs on method invocation
411aa8
  - JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
411aa8
  - JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
411aa8
  - JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
411aa8
  - JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
411aa8
  - JDK-8198339: Test javax/swing/border/Test6981576.java is unstable
411aa8
  - JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
411aa8
  - JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740
411aa8
  - JDK-8203672: JNI exception pending in PlainSocketImpl.c
411aa8
  - JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398
411aa8
  - JDK-8204834: Fix confusing "allocate" naming in OopStorage
411aa8
  - JDK-8205399: Set node color on pinned HashMap.TreeNode deletion
411aa8
  - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
411aa8
  - JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value
411aa8
  - JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
411aa8
  - JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
411aa8
  - JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
411aa8
  - JDK-8209333: Socket reset issue for TLS 1.3 socket close
411aa8
  - JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
411aa8
  - JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/ArchivedModuleCompareTest.java fails with EnableJVMCI.
411aa8
  - JDK-8210147: adjust some WSAGetLastError usages in windows network coding
411aa8
  - JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
411aa8
  - JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
411aa8
  - JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to check if EnableJVMCI is set.
411aa8
  - JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
411aa8
  - JDK-8211301: [macos] support full window content options
411aa8
  - JDK-8211332: Space for stub routines (code_size2) is too small on new Skylake CPUs
411aa8
  - JDK-8211339: NPE during SSL handshake caused by HostnameChecker
411aa8
  - JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
411aa8
  - JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
411aa8
  - JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE when JVMCI is absent
411aa8
  - JDK-8212167: JShell : Stack trace of exception has wrong line number
411aa8
  - JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
411aa8
  - JDK-8212986: Make Visual Studio compiler check less strict
411aa8
  - JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure
411aa8
  - JDK-8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent
411aa8
  - JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
411aa8
  - JDK-8214418: half-closed SSLEngine status may cause application dead loop
411aa8
  - JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"
411aa8
  - JDK-8214444: Wrong strncat limits in dfa.cpp
411aa8
  - JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
411aa8
  - JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"
411aa8
  - JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
411aa8
  - JDK-8214862: assert(proj != __null) at compile.cpp:3251
411aa8
  - JDK-8215369: Jcstress pollute /var/tmp with temporary files.
411aa8
  - JDK-8215551: Missing case label in nmethod::reloc_string_for()
411aa8
  - JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
411aa8
  - JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
411aa8
  - JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
411aa8
  - JDK-8216154: C4819 warnings at HotSpot sources on Windows
411aa8
  - JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
411aa8
  - JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
411aa8
  - JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
411aa8
  - JDK-8217447: Develop flag TraceICs is broken
411aa8
  - JDK-8217606: LdapContext#reconnect always opens a new connection
411aa8
  - JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
411aa8
  - JDK-8219214: Infinite Loop in CodeSection::dump()
411aa8
  - JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
411aa8
  - JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
411aa8
  - JDK-8221121: applications/microbenchmarks are encountering crashes in tier5
411aa8
  - JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread
411aa8
  - JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
411aa8
  - JDK-8221741: ClassCastException can happen when fontconfig.properties is used
411aa8
  - JDK-8221823: Requested JDialog width is ignored
411aa8
  - JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
411aa8
  - JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
411aa8
  - JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metric
411aa8
  - JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/RemoveDropTargetCrashTest.java fails on MacOS
411aa8
  - JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
411aa8
  - JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
411aa8
  - JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
411aa8
  - JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
411aa8
  - JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
411aa8
  - JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
411aa8
  - JDK-8225126: Test SetBoundsPaintTest.html faild on Windows when desktop is scaled
411aa8
  - JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
411aa8
  - JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
411aa8
  - JDK-8225653: Provide more information when hitting SIGILL from HaltNode
411aa8
  - JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
411aa8
  - JDK-8225789: Empty method parameter type should generate ClassFormatError
411aa8
  - JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
411aa8
  - JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden.
411aa8
  - JDK-8226653: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
411aa8
  - JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread
411aa8
  - JDK-8226879: Memory leak in Type::hashcons
411aa8
  - JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4
411aa8
  - JDK-8228407: JVM crashes with shared archive file mismatch
411aa8
  - JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
411aa8
  - JDK-8228757: Fail fast if the handshake type is unknown
411aa8
  - JDK-8229158: make UseSwitchProfiling non-experimental or false by-default
411aa8
  - JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed
411aa8
  - JDK-8229855: C2 fails with assert(false) failed: bad AD file
411aa8
  - JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint
411aa8
  - JDK-8231118: ARM32: Math tests failures
411aa8
  - JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
411aa8
  - JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
411aa8
  - JDK-8231438: [macOS] Dark mode for the desktop is not supported
411aa8
  - JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling
411aa8
  - JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors
411aa8
  - JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
411aa8
  - JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
411aa8
  - JDK-8231671: Fix copyright headers in hotspot (missing comma after year)
411aa8
  - JDK-8231720: Some perf regressions after 8225653
411aa8
  - JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
411aa8
  - JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument
411aa8
  - JDK-8232080: jlink plugins for vendor information and run-time options
411aa8
  - JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
411aa8
  - JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
411aa8
  - JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
411aa8
  - JDK-8232357: Compare version info of Santuario to legal notice
411aa8
  - JDK-8232572: Add hooks for custom output dir in Bundles.gmk
411aa8
  - JDK-8232634: Problem List ICMColorDataTest.java
411aa8
  - JDK-8232748: Build static versions of certain JDK libraries
411aa8
  - JDK-8232846: ProcessHandle.Info command with non-English shows question marks
411aa8
  - JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies
411aa8
  - JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
411aa8
  - JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
411aa8
  - JDK-8233291: [TESTBUG] tools/jlink/plugins/VendorInfoPluginsTest.java fails with debug or non-server VMs
411aa8
  - JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp
411aa8
  - JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
411aa8
  - JDK-8233608: Minimal build broken after JDK-8233494
411aa8
  - JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
411aa8
  - JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is ON
411aa8
  - JDK-8233707: systemScale.cpp could not compile with VS2019
411aa8
  - JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
411aa8
  - JDK-8233880: Support compilers with multi-digit major version numbers
411aa8
  - JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return type
411aa8
  - JDK-8234137: The "AutoTestOnTop.java" test may run external applications
411aa8
  - JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
411aa8
  - JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/ModalDialogEnterExitEventsTest.java fails in Windows
411aa8
  - JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
411aa8
  - JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/DisposeDialogNotActivateOwnerTest/DisposeDialogNotActivateOwnerTest.java fails on linux-x64 nightly
411aa8
  - JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
411aa8
  - JDK-8234522: [macos] Crash with use of native file dialog
411aa8
  - JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor
411aa8
  - JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out
411aa8
  - JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
411aa8
  - JDK-8234728: Some security tests should support TLSv1.3
411aa8
  - JDK-8234779: Provide idiom for declaring classes noncopyable
411aa8
  - JDK-8234968: check calloc rv in libinstrument InvocationAdapter
411aa8
  - JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/DrawImageBG/SystemBgColorTest.java fails
411aa8
  - JDK-8235183: Remove the "HACK CODE" in comment
411aa8
  - JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
411aa8
  - JDK-8235311: Tag mismatch may alert bad_record_mac
411aa8
  - JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
411aa8
  - JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
411aa8
  - JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
411aa8
  - JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
411aa8
  - JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
411aa8
  - JDK-8235686: Add more custom hooks in Bundles.gmk
411aa8
  - JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
411aa8
  - JDK-8235762: JVM crash in SWPointer during C2 compilation
411aa8
  - JDK-8235834: IBM-943 charset encoder needs updating
411aa8
  - JDK-8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property.
411aa8
  - JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image
411aa8
  - JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
411aa8
  - JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
411aa8
  - JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
411aa8
  - JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
411aa8
  - JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
411aa8
  - JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
411aa8
  - JDK-8236897: Fix the copyright header for pkcs11gcm2.h
411aa8
  - JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build
411aa8
  - JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
411aa8
  - JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing
411aa8
  - JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
411aa8
  - JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails with release VMs
411aa8
  - JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291
411aa8
  - JDK-8237192: Generate stripped/public pdbs on Windows for jdk images
411aa8
  - JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers
411aa8
  - JDK-8237474: Default SSLEngine should create in server role
411aa8
  - JDK-8237859: C2: Crash when loads float above range check
411aa8
  - JDK-8237951: CTW: C2 compilation fails with "malformed control flow"
411aa8
  - JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
411aa8
  - JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes.
411aa8
  - JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs
411aa8
  - JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
411aa8
  - JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
411aa8
  - JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
411aa8
  - JDK-8238676: jni crashes on accessing it from process exit hook
411aa8
  - JDK-8238721: Add failing client jtreg tests to the Problem List
411aa8
  - JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
411aa8
  - JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
411aa8
  - JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
411aa8
  - JDK-8238898: Missing hash characters for header on license file
411aa8
  - JDK-8238942: Rendering artifacts with LCD text and fractional metrics
411aa8
  - JDK-8238985: [TESTBUG] The arrow image is blue instead of green
411aa8
  - JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
411aa8
  - JDK-8239055: Wrong implementation of VMState.hasListener
411aa8
  - JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code.
411aa8
  - JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses
411aa8
  - JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning
411aa8
  - JDK-8239351: Give more meaningful InternalError messages in Deflater.c
411aa8
  - JDK-8239365: ProcessBuilder test modifications for AIX execution
411aa8
  - JDK-8239456: vtable stub generation: assert failure (code size estimate)
411aa8
  - JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
411aa8
  - JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
411aa8
  - JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating "END." marker at lastline is not always true
411aa8
  - JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings
411aa8
  - JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
411aa8
  - JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
411aa8
  - JDK-8239819: XToolkit: Misread of screen information memory
411aa8
  - JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
411aa8
  - JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder
411aa8
  - JDK-8239915: Zero VM crashes when handling dynamic constant
411aa8
  - JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
411aa8
  - JDK-8239976: Put JDK-8239965 on the ProblemList.txt
411aa8
  - JDK-8240073: Fix 'test-make' build target in 11u
411aa8
  - JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
411aa8
  - JDK-8240202: A few client tests leave mouse buttons pressed
411aa8
  - JDK-8240220: IdealLoopTree::dump_head predicate printing is broken
411aa8
  - JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate
411aa8
  - JDK-8240227: Loop predicates should be copied to unswitched loops
411aa8
  - JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/compiler/loopopts/superword/SumRedAbsNeg_Float.java
411aa8
  - JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print
411aa8
  - JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module
411aa8
  - JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
411aa8
  - JDK-8240603: Windows 32bit compile error after 8238676
411aa8
  - JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
411aa8
  - JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:"
411aa8
  - JDK-8240786: [TESTBUG] The test java/awt/Window/GetScreenLocation/GetScreenLocationTest.java fails on HiDPI screen
411aa8
  - JDK-8240824: enhance print_full_memory_info on Linux by THP related information
411aa8
  - JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
411aa8
  - JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
411aa8
  - JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
411aa8
  - JDK-8241445: Fix copyright in test/jdk/tools/launcher/ArgFileSyntax.java
411aa8
  - JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
411aa8
  - JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
411aa8
  - JDK-8241556: Memory leak if -XX:CompileCommand is set
411aa8
  - JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"
411aa8
  - JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
411aa8
  - JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set
411aa8
  - JDK-8241660: Add virtualization information output to hs_err file on macOS
411aa8
  - JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
411aa8
  - JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
411aa8
  - JDK-8241900: Loop unswitching may cause dependence on null check to be lost
411aa8
  - JDK-8241948: enhance list of environment variables printed in hs_err file
411aa8
  - JDK-8241996: on linux set full relro in the linker flags
411aa8
  - JDK-8242108: Performance regression after fix for JDK-8229496
411aa8
  - JDK-8242141: New System Properties to configure the TLS signature schemes
411aa8
  - JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
411aa8
  - JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable
411aa8
  - JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
411aa8
  - JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
411aa8
  - JDK-8242379: [TESTBUG] compiler/loopopts/TestLoopUnswitchingLostCastDependency.java fails with release VMs
411aa8
  - JDK-8242470: Update Xerces to Version 2.12.1
411aa8
  - JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
411aa8
  - JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
411aa8
  - JDK-8242626: enhance posix print_rlimit_info
411aa8
  - JDK-8243059: Build fails when --with-vendor-name contains a comma
411aa8
  - JDK-8243539: Copyright info (Year) should be updated for fix of 8241638
411aa8
  - JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
411aa8
  - JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
411aa8
  - JDK-8244520: problemlist java/awt/font/Rotate/RotatedFontTest.java on linux
411aa8
  - JDK-8244777: ClassLoaderStats VM Op uses constant hash value
411aa8
  - JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function
411aa8
  - JDK-8244951: Missing entitlements for hardened runtime
411aa8
  - JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
411aa8
  - JDK-8245649: Revert 8245397 backport of 8230591
411aa8
  - JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
411aa8
  - JDK-8246613: Choose the default SecureRandom algo based on registration ordering
411aa8
  - JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
411aa8
411aa8
Notes on individual issues:
411aa8
===========================
411aa8
411aa8
security-libs/java.security:
411aa8
411aa8
JDK-8244167: Removal of Comodo Root CA Certificate
411aa8
==================================================
411aa8
The following expired Comodo root CA certificate was removed from the `cacerts` keystore: +
411aa8
alias name "addtrustclass1ca [jdk]"
411aa8
411aa8
Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
411aa8
411aa8
JDK-8244166: Removal of DocuSign Root CA Certificate
411aa8
====================================================
411aa8
The following expired DocuSign root CA certificate was removed from the `cacerts` keystore: +
411aa8
alias name "keynectisrootca [jdk]"
411aa8
411aa8
Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
411aa8
411aa8
security-libs/javax.crypto:pkcs11:
411aa8
411aa8
JDK-8240191: Allow SunPKCS11 initialization with NSS when external FIPS modules are present in the Security Modules Database
411aa8
============================================================================================================================
411aa8
The SunPKCS11 security provider can now be initialized with NSS when
411aa8
FIPS-enabled external modules are configured in the Security Modules
411aa8
Database (NSSDB). Prior to this change, the SunPKCS11 provider would
411aa8
throw a RuntimeException with the message: "FIPS flag set for
411aa8
non-internal module" when such a library was configured for NSS in
411aa8
non-FIPS mode.
411aa8
411aa8
This change allows the JDK to work properly with recent NSS releases
411aa8
in GNU/Linux operating systems when the system-wide FIPS policy is
411aa8
turned on.
411aa8
411aa8
Further information can be found in JDK-8238555.
411aa8
411aa8
security-libs/javax.net.ssl:
411aa8
411aa8
JDK-8245077: Default SSLEngine Should Create in Server Role
411aa8
===========================================================
411aa8
In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client
411aa8
mode when handshaking.  As a result, the set of default enabled
411aa8
protocols may differ to what is expected. `SSLEngine` would usually be
411aa8
used in server mode. From this JDK release onwards, `SSLEngine` will
411aa8
default to server mode. The
411aa8
`javax.net.ssl.SSLEngine.setUseClientMode(boolean mode)` method may
411aa8
be used to configure the mode.
411aa8
411aa8
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
411aa8
=========================================================================
411aa8
411aa8
Two new System Properties are added to customize the TLS signature
411aa8
schemes in JDK.  `jdk.tls.client.SignatureSchemes` is added for TLS
411aa8
client side, and `jdk.tls.server.SignatureSchemes` is added for server
411aa8
side.
411aa8
411aa8
Each System Property contains a comma-separated list of supported
411aa8
signature scheme names specifying the signature schemes that could be
411aa8
used for the TLS connections.
411aa8
411aa8
The names are described in the "Signature Schemes" section of the
411aa8
*Java Security Standard Algorithm Names Specification*.
411aa8
411aa8
New in release OpenJDK 11.0.7 (2020-04-14):
411aa8
===========================================
411aa8
Live versions of these release notes can be found at:
411aa8
  * https://bitly.com/oj1107
411aa8
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.txt
411aa8
411aa8
* Security fixes
411aa8
  - JDK-8223898, CVE-2020-2754: Forward references to Nashorn
411aa8
  - JDK-8223904, CVE-2020-2755: Improve Nashorn matching
411aa8
  - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
411aa8
  - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
411aa8
  - JDK-8225603: Enhancement for big integers
411aa8
  - JDK-8226346: Build better binary builders
411aa8
  - JDK-8227467: Better class method invocations
411aa8
  - JDK-8227542: Manifest improved jar headers
411aa8
  - JDK-8229733: TLS message handling improvements
411aa8
  - JDK-8231415, CVE-2020-2773: Better signatures in XML
411aa8
  - JDK-8231785: Improved socket permissions
411aa8
  - JDK-8232424, CVE-2020-2778: More constrained algorithms
411aa8
  - JDK-8232581, CVE-2020-2767: Improve TLS verification
411aa8
  - JDK-8233250: Better X11 rendering
411aa8
  - JDK-8233410: Better Build Scripting
411aa8
  - JDK-8234027: Better JCEKS key support
411aa8
  - JDK-8234408, CVE-2020-2781: Improve TLS session handling
411aa8
  - JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
411aa8
  - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
411aa8
  - JDK-8235274, CVE-2020-2805: Enhance typing of methods
411aa8
  - JDK-8235691, CVE-2020-2816: Enhance TLS connectivity
411aa8
  - JDK-8236201, CVE-2020-2830: Better Scanner conversions
411aa8
  - JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap
411aa8
* Other changes
411aa8
  - JDK-4919790: Errors in alert ssl message does not reflect the actual certificate status
411aa8
  - JDK-4949105: Access Bridge lacks html tags parsing
411aa8
  - JDK-7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
411aa8
  - JDK-7143743: Potential memory leak with zip provider
411aa8
  - JDK-8005819: Support cross-realm MSSFU
411aa8
  - JDK-8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/4983388/bug4983388.java fails with shortcuts on menus do not work
411aa8
  - JDK-8068184: Fix for JDK-8032832 caused a deadlock
411aa8
  - JDK-8145845: [AOT] NullPointerException in compiler/whitebox/GetCodeHeapEntriesTest.java
411aa8
  - JDK-8152988: [AOT] Update test batch definitions to include aot-ed java.base module mode into hs-comp testing
411aa8
  - JDK-8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle cross-compilation
411aa8
  - JDK-8163083: SocketListeningConnector does not allow invocations with port 0
411aa8
  - JDK-8163251: Hard coded loop limit prevents reading of smart card data greater than 8k
411aa8
  - JDK-8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java fails with -XX:-EliminateAllocations
411aa8
  - JDK-8169718: nsk/jdb/locals/locals002: ERROR: Cannot find boolVar with expected value: false
411aa8
  - JDK-8176556: java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails for JFIF
411aa8
  - JDK-8178798: Two compiler/aot/verification/vmflags tests fail by timeout with UseAVX=3
411aa8
  - JDK-8183107: PKCS11 regression regarding checkKeySize
411aa8
  - JDK-8185005: Improve performance of ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
411aa8
  - JDK-8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
411aa8
  - JDK-8189861: Refactor CacheFind
411aa8
  - JDK-8193042: NativeLookup::lookup_critical_entry() should only load shared library once
411aa8
  - JDK-8193596: java/net/DatagramPacket/ReuseBuf.java failed due to timeout
411aa8
  - JDK-8194944: Regression automated test 'open/test/jdk/javax/swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java' fails
411aa8
  - JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
411aa8
  - JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java causes NPE
411aa8
  - JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
411aa8
  - JDK-8198398: Test javax/swing/JColorChooser/Test6199676.java fails in mach5
411aa8
  - JDK-8199072: Test javax/swing/GroupLayout/6613904/bug6613904.java is unstable
411aa8
  - JDK-8200432: javadoc fails with ClassCastException on {@link byte[]}
411aa8
  - JDK-8201349: build broken when configured with --with-zlib=bundled on gcc 7.3
411aa8
  - JDK-8201355: Avoid native memory allocation in sun.security.mscapi.PRNG.generateSeed
411aa8
  - JDK-8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
411aa8
  - JDK-8203364: Some serviceability/sa/ tests intermittently fail with java.io.IOException: LingeredApp terminated with non-zero exit code 3
411aa8
  - JDK-8203687: javax/net/ssl/compatibility/Compatibility.java supports TLS 1.3
411aa8
  - JDK-8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The divider location is wrong
411aa8
  - JDK-8203911: Test runtime/modules/getModuleJNI/GetModule fails with -Xcheck:jni
411aa8
  - JDK-8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out of java heap
411aa8
  - JDK-8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent 7 timed out
411aa8
  - JDK-8204551: Event descriptions are truncated in logs
411aa8
  - JDK-8206963: [AOT] bug with multiple class loaders
411aa8
  - JDK-8207367: 10 vmTestbase/nsk/jdi tests timed out when running with jtreg
411aa8
  - JDK-8207832: serviceability/sa/ClhsdbCDSCore.java failed with "Couldn't find core file location"
411aa8
  - JDK-8207938: At step6,Click Add button,case failed automatically.
411aa8
  - JDK-8208157: requires.VMProps throws NPE for missing properties in "release" file
411aa8
  - JDK-8208379: compiler/jvmci/events/JvmciNotifyInstallEventTest.java failed with "Got unexpected event count after 2nd install attempt: expected 9 to equal 2"
411aa8
  - JDK-8208658: Make CDS archived heap regions usable even if compressed oop encoding has changed
411aa8
  - JDK-8208715: Conversion of milliseconds to nanoseconds in UNIXProcess contains bug
411aa8
  - JDK-8209361: [AOT] Unexpected number of references for JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111-->111]: 0 (expected at least 1)
411aa8
  - JDK-8209385: CDS runtime classpath checking is too strict when only classes from the system modules are archived
411aa8
  - JDK-8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
411aa8
  - JDK-8209418: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
411aa8
  - JDK-8209494: Create a test for SwingSet InternalFrameDemo
411aa8
  - JDK-8209499: Create test for SwingSet EditorPaneDemo
411aa8
  - JDK-8209574: [AOT] breakpoint events are generated in different threads does not meet expected count
411aa8
  - JDK-8209686: cleanup arguments to PhaseIdealLoop() constructor
411aa8
  - JDK-8209789: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
411aa8
  - JDK-8209802: Garbage collectors should register JFR types themselves to avoid build errors.
411aa8
  - JDK-8209807: improve handling exception in requires.VMProps
411aa8
  - JDK-8209817: stack is executable when building with Clang on Linux
411aa8
  - JDK-8209824: Improve the code coverage for ThreadLocal
411aa8
  - JDK-8209826: Undefined reference to os::write after JDK-8209657 (filemap.hpp cleanup)
411aa8
  - JDK-8209850: Allow NamedThreads to use GlobalCounter critical sections
411aa8
  - JDK-8209976: Improve iteration over non-JavaThreads
411aa8
  - JDK-8209993: Create a test for SwingSet3 ToolTipDemo
411aa8
  - JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
411aa8
  - JDK-8210052: Enable testing for all the available look and feels in SwingSet3 demo tests
411aa8
  - JDK-8210055: Enable different look and feel tests in SwingSet3 demo tests
411aa8
  - JDK-8210057: Enable different look and feels in SwingSet3 demo test InternalFrameDemoTest
411aa8
  - JDK-8210058: Algorithmic Italic font leans opposite angle in Printing
411aa8
  - JDK-8210220: [AOT] jdwp test cases are failing with error # ERROR: TEST FAILED: Cought IOException while receiving event packet
411aa8
  - JDK-8210289: ArchivedKlassSubGraphInfoRecord is incomplete
411aa8
  - JDK-8210459: Add support for generating compile_commands.json
411aa8
  - JDK-8210476: sun/security/mscapi/PrngSlow.java fails with Still too slow
411aa8
  - JDK-8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/referringObjects/referringObjects002/referringObjects002.java fails with unexpected size of ClassLoaderReference.referringObjects
411aa8
  - JDK-8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java crash
411aa8
  - JDK-8210632: Add key exchange algorithm to javax/net/ssl/TLSCommon/CipherSuite.java
411aa8
  - JDK-8210699: Problem list tests which times out in Xcomp mode
411aa8
  - JDK-8210793: [JVMCI] AllocateCompileIdTest.java failed to find DiagnosticCommand.class
411aa8
  - JDK-8210910: Create test for FileChooserDemo
411aa8
  - JDK-8210994: Create test for SwingSet3 FrameDemo
411aa8
  - JDK-8211139: Increase timeout value in all tests under jdk/sanity/client/SwingSet/src
411aa8
  - JDK-8211160: Handle different look and feels in JInternalFrameOperator
411aa8
  - JDK-8211211: vmTestbase/metaspace/stressDictionary/StressDictionary.java timeout
411aa8
  - JDK-8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
411aa8
  - JDK-8211443: Enable different look and feels in SwingSet3 demo test SplitPaneDemoTest
411aa8
  - JDK-8211703: JInternalFrame : java.lang.AssertionError: cannot find the internal frame
411aa8
  - JDK-8211781: re-building fails after changing Graal sources
411aa8
  - JDK-8212897: Some improvements in the EditorPaneDemotest
411aa8
  - JDK-8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04 LTS
411aa8
  - JDK-8213009: Refactoring existing SunMSCAPI classes
411aa8
  - JDK-8213010: Supporting keys created with certmgr.exe
411aa8
  - JDK-8213168: Enable different look and feel tests in SwingSet3 demo test FileChooserDemoTest
411aa8
  - JDK-8213348: jdk.internal.vm.compiler.management service providers missing in module descriptor
411aa8
  - JDK-8213906: Update arm devkits with libXrandr headers
411aa8
  - JDK-8213908: AssertionError in DeferredAttr at setOverloadKind
411aa8
  - JDK-8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
411aa8
  - JDK-8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed: elembt=byte; loadbt=void; unsigned=0
411aa8
  - JDK-8214345: infinite recursion while checking super class
411aa8
  - JDK-8214471: Enable different look and feel tests in SwingSet3 demo test ToolTipDemoTest
411aa8
  - JDK-8214534: Setting of THIS_FILE in the build is broken
411aa8
  - JDK-8214557: Filter out VM flags which don't affect AOT code generation
411aa8
  - JDK-8214578: [macos] Problem with backslashes on macOS/JIS keyboard: Java ignores system settings
411aa8
  - JDK-8214840: runtime/NMT/MallocStressTest.java timed out
411aa8
  - JDK-8214850: Rename vm_operations.?pp files to vmOperations.?pp files
411aa8
  - JDK-8214904: Test8004741.java failed due to "Too few ThreadDeath hits; expected at least 6 but saw only 5"
411aa8
  - JDK-8215322: add @file support to jaotc
411aa8
  - JDK-8215355: Object monitor deadlock with no threads holding the monitor (using jemalloc 5.1)
411aa8
  - JDK-8215396: JTabbedPane preferred size calculation is wrong for SCROLL_TAB_LAYOUT
411aa8
  - JDK-8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java crashed with AOT enabled
411aa8
  - JDK-8216353: Use utility APIs introduced in org/netbeans/jemmy/util/LookAndFeel class in client sanity test cases
411aa8
  - JDK-8216354: Syntax error in toolchain_windows.m4
411aa8
  - JDK-8216472: (se) Stack overflow during selection operation leads to crash (win)
411aa8
  - JDK-8216535: tools/jimage/JImageExtractTest.java timed out
411aa8
  - JDK-8217235: Create automated test for SwingSet ColorChooserDemoTest
411aa8
  - JDK-8217297: Add support for multiple look and feel for SwingSet SliderDemoTest
411aa8
  - JDK-8217338: [Containers] Improve systemd slice memory limit support
411aa8
  - JDK-8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
411aa8
  - JDK-8217634: RunTest documentation and usability update
411aa8
  - JDK-8217717: ZGC: Broken oop map in C1 load barrier stub
411aa8
  - JDK-8217728: Speed up incremental rerun of "make hotspot"
411aa8
  - JDK-8218268: Javac treats Manifest Class-Path entries as Paths instead of URLs
411aa8
  - JDK-8218662: Allow 204 responses with Content-Length:0
411aa8
  - JDK-8218882: NET_Writev is declared, NET_WriteV is defined
411aa8
  - JDK-8218889: Improperly use of the Optional API
411aa8
  - JDK-8219205: JFR file without license header
411aa8
  - JDK-8219597: (bf) Heap buffer state changes could provoke unexpected exceptions
411aa8
  - JDK-8219723: javax/net/ssl/compatibility/Compatibility.java failed on some SNI cases
411aa8
  - JDK-8220348: [ntintel] asserts about copying unaligned array
411aa8
  - JDK-8220451: jdi/EventQueue/remove/remove004 failed due to "ERROR: thread2 is not alive"
411aa8
  - JDK-8220456: jdi/EventQueue/remove_l/remove_l004 failed due to "TIMEOUT while waiting for event"
411aa8
  - JDK-8220479: java/nio/channels/Selector/SelectWithConsumer.java failed at testTwoChannels()
411aa8
  - JDK-8220613: java/util/Arrays/TimSortStackSize2.java times out with fastdebug build
411aa8
  - JDK-8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed out
411aa8
  - JDK-8220786: Create new switch to redirect error reporting output to stdout or stderr
411aa8
  - JDK-8221270: Duplicated synchronized keywords in SSLSocketImpl
411aa8
  - JDK-8221312: test/jdk/sanity/client/SwingSet/src/ColorChooserDemoTest.java failed
411aa8
  - JDK-8221851: Use of THIS_FILE in hotspot invalidates precompiled header on Linux/GCC
411aa8
  - JDK-8221885: Add intermittent test in the JavaSound to the ProblemList
411aa8
  - JDK-8222264: Windows incremental build is broken with JDK-8217728
411aa8
  - JDK-8222391: javax/net/ssl/compatibility/Compatibility.java should be more flexible
411aa8
  - JDK-8222448: java/lang/reflect/PublicMethods/PublicMethodsTest.java times out
411aa8
  - JDK-8222519: ButtonDemoScreenshotTest fails randomly with "still state to be reached"
411aa8
  - JDK-8222741: jdi/EventQueue/remove/remove004 fails due to VMDisconnectedException
411aa8
  - JDK-8223003: SunMSCAPI keys are not cleaned up
411aa8
  - JDK-8223063: Support CNG RSA keys
411aa8
  - JDK-8223158: Docked MacBook cannot start any Java Swing applications
411aa8
  - JDK-8223260: NamingManager should cache InitialContextFactory
411aa8
  - JDK-8223464: Improve version string for Oracle CI builds
411aa8
  - JDK-8223558: Java does not render Myanmar script correctly
411aa8
  - JDK-8223627: jdk-13+20 bundle name contains null instead of ea
411aa8
  - JDK-8223638: Replace wildcard address with loopback or local host in tests - part 6
411aa8
  - JDK-8223678: Add Visual Studio Code workspace generation support (for native code)
411aa8
  - JDK-8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due to hang in LdapRequest.getReplyBer
411aa8
  - JDK-8223769: Assert triggers with -XX:+StressReflectiveCode
411aa8
  - JDK-8224187: Refactor arraycopy_prologue to allow ZGC read barriers on arraycopy
411aa8
  - JDK-8224475: JTextPane does not show images in HTML rendering
411aa8
  - JDK-8224673: Adjust permission for delayed starting of debugging
411aa8
  - JDK-8224705: Tests that need to be problem-listed or have printer resources
411aa8
  - JDK-8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot find J2Ddemo.jar
411aa8
  - JDK-8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/NoAutotransferToDisabledCompTest.java fails linux-x64
411aa8
  - JDK-8224830: test/jdk/java/awt/Focus/ModalExcludedWindowClickTest/ModalExcludedWindowClickTest.java fails on linux-x64
411aa8
  - JDK-8224851: AArch64: fix warnings and errors with Clang and GCC 8.3
411aa8
  - JDK-8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with stream closed
411aa8
  - JDK-8225007: java/awt/print/PrinterJob/LandscapeStackOverflow.java may hang
411aa8
  - JDK-8225105: java/awt/Focus/ShowFrameCheckForegroundTest/ShowFrameCheckForegroundTest.java fails in Windows 10
411aa8
  - JDK-8225117: java/math/BigInteger/SymmetricRangeTests.java fails with ParseException
411aa8
  - JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts test
411aa8
  - JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
411aa8
  - JDK-8225144: [macos] In Aqua L&F backspace key does not delete when Shift is pressed
411aa8
  - JDK-8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
411aa8
  - JDK-8225182: JNI exception pending in DestroyXIMCallback of awt_InputMethod.c:1327
411aa8
  - JDK-8225199: [Graal] compiler/jvmci/compilerToVM/IsMatureVsReprofileTest.java fails with -XX:CompileThresholdScaling=0.1
411aa8
  - JDK-8225305: ProblemList java/lang/invoke/VarHandles tests
411aa8
  - JDK-8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java timed out
411aa8
  - JDK-8225430: Replace wildcard address with loopback or local host in tests - part 14
411aa8
  - JDK-8225435: Upgrade IANA Language Subtag Registry to the latest for JDK14
411aa8
  - JDK-8225487: giflib legal file is missing attribution for openbsd-reallocarray.c
411aa8
  - JDK-8225567: Wrong file headers with 8202414 fix changeset
411aa8
  - JDK-8225684: [AOT] vmTestbase/vm/oom/production/AlwaysOOMProduction tests fail with AOTed java.base
411aa8
  - JDK-8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
411aa8
  - JDK-8225797: OldObjectSample event creates unexpected amount of checkpoint data
411aa8
  - JDK-8226381: ProblemList java/lang/reflect/PublicMethods/PublicMethodsTest.java
411aa8
  - JDK-8226406: JVM fails to detect mismatched or corrupt CDS archive
411aa8
  - JDK-8226608: Hide the onjcmd option from the help output
411aa8
  - JDK-8226892: ActionListeners on JRadioButtons don't get notified when selection is changed with arrow keys
411aa8
  - JDK-8227112: exclude compiler/intrinsics/sha/sanity tests from AOT runs
411aa8
  - JDK-8227324: Upgrade to freetype 2.10.1
411aa8
  - JDK-8227528: TestAbortVMOnSafepointTimeout.java failed due to "RuntimeException: 'Safepoint sync time longer than' missing from stdout/stderr"
411aa8
  - JDK-8227645: Some tests in serviceability/sa run with fixed -Xmx values and risk running out of memory
411aa8
  - JDK-8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
411aa8
  - JDK-8227662: freetype seeks to index at the end of the font data
411aa8
  - JDK-8228479: Correct the format of ColorChooserDemoTest
411aa8
  - JDK-8228613: java.security.Provider#getServices order is no longer deterministic
411aa8
  - JDK-8228969: 2019-09-28 public suffix list update
411aa8
  - JDK-8229236: CriticalJNINatives: dll handling should be done in native thread state
411aa8
  - JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
411aa8
  - JDK-8229888: (zipfs) Updating an existing zip file does not preserve original permissions
411aa8
  - JDK-8229994: assert(false) failed: Bad graph detected in get_early_ctrl_for_expensive
411aa8
  - JDK-8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
411aa8
  - JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey cause Exception
411aa8
  - JDK-8230390: Problemlist SA tests with AOT
411aa8
  - JDK-8230400: Missing constant pool entry for a method in stacktrace
411aa8
  - JDK-8230459: Test failed to resume JVMCI CompilerThread
411aa8
  - JDK-8230480: check malloc/calloc results in java.desktop
411aa8
  - JDK-8230597: Update GIFlib library to the 5.2.1
411aa8
  - JDK-8230611: infinite loop in LogOutputList::wait_until_no_readers()
411aa8
  - JDK-8230624: [TESTBUG] Problemlist JFR compiler/TestCodeSweeper.java
411aa8
  - JDK-8230677: Should disable Escape Analysis if JVMTI capability can_get_owned_monitor_info was taken
411aa8
  - JDK-8230926: [macosx] Two apostrophes are entered instead of one with "U.S. International - PC" layout
411aa8
  - JDK-8231025: Incorrect method tag offset for big endian platform
411aa8
  - JDK-8231081: TestMetadataRetention fails due to missing symbol id
411aa8
  - JDK-8231387: java.security.Provider.getService returns random result due to race condition with mutating methods in the same class
411aa8
  - JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
411aa8
  - JDK-8231445: check ZALLOC return values in awt coding
411aa8
  - JDK-8231507: Update Apache Santuario (XML Signature) to version 2.1.4
411aa8
  - JDK-8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call
411aa8
  - JDK-8231753: use more Posix functionality in aix os::print_os_info
411aa8
  - JDK-8231810: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java fails intermittently with "java.lang.Exception: Unexpected EOF"
411aa8
  - JDK-8232003: (fs) Files.write can leak file descriptor in the exception case
411aa8
  - JDK-8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC: Heap too small
411aa8
  - JDK-8232060: add some initializations using sigemptyset in os_aix.cpp
411aa8
  - JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
411aa8
  - JDK-8232167: Visual Studio install found through --with-tools-dir value is discarded
411aa8
  - JDK-8232170: FSInfo#getJarClassPath throws an exception not declared in its throws clause
411aa8
  - JDK-8232200: [macos 10.15] Windows in fullscreen tests jumps around the screen
411aa8
  - JDK-8232207: Linux os::available_memory re-reads cgroup configuration on every invocation
411aa8
  - JDK-8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
411aa8
  - JDK-8232370: Refactor some com.sun.jdi tests to enable IDE integration
411aa8
  - JDK-8232433: [macos 10.15] java/awt/Window/LocationAtScreenCorner/LocationAtScreenCorner.java may fail
411aa8
  - JDK-8232571: Add missing SIGINFO signal
411aa8
  - JDK-8232692: [TESTBUG] compiler/aot/fingerprint/SelfChangedCDS.java fails when cds is disabled
411aa8
  - JDK-8232713: Update BCEL version to 6.3.1 in license file
411aa8
  - JDK-8232806: Introduce a system property to disable eager lambda initialization
411aa8
  - JDK-8232834: RunTest sometimes fails to produce valid exitcode.txt
411aa8
  - JDK-8232880: Update test documentation with additional settings for client UI tooltip tests
411aa8
  - JDK-8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures.
411aa8
  - JDK-8233018: Add a new test to verify that DatagramSocket is not interruptible
411aa8
  - JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong result if Klass* is aligned to 32bit
411aa8
  - JDK-8233032: assert(in_bb(n)) failed: must be
411aa8
  - JDK-8233078: fix minimal VM build on Linux ppc64(le)
411aa8
  - JDK-8233328: fix minimal VM build on Linux s390x
411aa8
  - JDK-8233383: Various minor fixes
411aa8
  - JDK-8233466: aarch64: remove unnecessary load of mdo when profiling return and parameters type
411aa8
  - JDK-8233491: Crash in AdapterHandlerLibrary::get_adapter with CDS due to code cache exhaustion
411aa8
  - JDK-8233529: loopTransform.cpp:2984: Error: assert(p_f->Opcode() == Op_IfFalse) failed
411aa8
  - JDK-8233548: Update CUP to v0.11b
411aa8
  - JDK-8233649: Update ProblemList.txt to exclude failing headful tests on macos
411aa8
  - JDK-8233656: assert(d->is_CFG() && n->is_CFG()) failed: must have CFG nodes
411aa8
  - JDK-8233657: Intermittent NPE in Component.validate()
411aa8
  - JDK-8234288: Turkey Time Zone returns incorrect time zone name
411aa8
  - JDK-8234323: NULL-check return value of SurfaceData_InitOps on macosx
411aa8
  - JDK-8234339: replace JLI_StrTok in java_md_solinux.c
411aa8
  - JDK-8234340: Bump update version for OpenJDK: jdk-11.0.7
411aa8
  - JDK-8234350: assert(mode == ControlAroundStripMined && (use == sfpt || !use->is_reachable_from_root())) failed: missed a node
411aa8
  - JDK-8234386: [macos] NPE was thrown at expanding Choice from maximized frame
411aa8
  - JDK-8234397: add OS uptime information to os::print_os_info output
411aa8
  - JDK-8234423: Modifying ArrayList.subList().subList() resets modCount of subList
411aa8
  - JDK-8234466: Class loading deadlock involving X509Factory#commitEvent()
411aa8
  - JDK-8234501: remove obsolete NET_ReadV
411aa8
  - JDK-8234525: enable link-time section-gc for linux s390x to remove unused code
411aa8
  - JDK-8234610: MaxVectorSize set wrongly when UseAVX=3 is specified after JDK-8221092
411aa8
  - JDK-8234617: C1: Incorrect result of field load due to missing narrowing conversion
411aa8
  - JDK-8234723: javax/net/ssl/TLS tests support TLSv1.3
411aa8
  - JDK-8234724: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java supports TLSv1.3
411aa8
  - JDK-8234741: enhance os::get_core_path on macOS
411aa8
  - JDK-8234769: Duplicate attribution in freetype.md
411aa8
  - JDK-8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
411aa8
  - JDK-8234809: set relro in linker flags when building with gcc
411aa8
  - JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java fails on Windows 10
411aa8
  - JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
411aa8
  - JDK-8235288: AVX 512 instructions inadvertently used on Xeon for small vector width operations
411aa8
  - JDK-8235325: build failure on Linux after 8235243
411aa8
  - JDK-8235383: C1 compilation fails with -XX:+PrintIRDuringConstruction -XX:+Verbose
411aa8
  - JDK-8235489: handle return values of sscanf calls in hotspot
411aa8
  - JDK-8235509: Backport for JDK-8209657 Refactor filemap.hpp to simplify integration with Serviceability Agent.
411aa8
  - JDK-8235510: java.util.zip.CRC32 performance drop after 8200067
411aa8
  - JDK-8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java does not handle archive mapping failure
411aa8
  - JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if prelink is enabled
411aa8
  - JDK-8235671: enhance print_rlimit_info in os_posix
411aa8
  - JDK-8235744: PIT: test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in linux-x64
411aa8
  - JDK-8235904: Infinite loop when rendering huge lines
411aa8
  - JDK-8235998: [c2] Memory leaks during tracing after '8224193: stringStream should not use Resource Area'.
411aa8
  - JDK-8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
411aa8
  - JDK-8236140: assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it
411aa8
  - JDK-8236179: C1 register allocation error with T_ADDRESS
411aa8
  - JDK-8236488: Support for configure option --with-native-debug-symbols=internal is impossible on Windows
411aa8
  - JDK-8236500: Windows ucrt.dll should be looked up in versioned WINSDK subdirectory
411aa8
  - JDK-8236709: struct SwitchRange in HS violates C++ One Definition Rule
411aa8
  - JDK-8236848: [JDK 11u] make run-test-tier1 fails after backport of JDK-8232834
411aa8
  - JDK-8236873: Worker has a deadlock bug
411aa8
  - JDK-8237217: Incorrect G1StringDedupEntry type used in StringDedupTable destructor
411aa8
  - JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
411aa8
  - JDK-8237375: SimpleThresholdPolicy misses CounterDecay timestamp initialization
411aa8
  - JDK-8237508: Simplify JarFile.isInitializing
411aa8
  - JDK-8237540: Missing files in backport of JDK-8210910
411aa8
  - JDK-8237541: Missing files in backport of JDK-8236528
411aa8
  - JDK-8237600: Test SunJSSEFIPSInit fails on Ubuntu
411aa8
  - JDK-8237819: s390x - remove unused pd_zero_to_words_large
411aa8
  - JDK-8237869: exclude jtreg test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java because of instabilities
411aa8
  - JDK-8237879: make 4.3 breaks build
411aa8
  - JDK-8237945: CTW: C2 compilation fails with assert(just_allocated_object(alloc_ctl) == ptr) failed: most recent allo
411aa8
  - JDK-8238225: Issues reported after replacing symlink at Contents/MacOS/libjli.dylib with binary
411aa8
  - JDK-8238247: CTW runner should sweep nmethods more aggressively
411aa8
  - JDK-8238366: CTW runner closes standard output on exit
411aa8
  - JDK-8238438: SuperWord::co_locate_pack picks memory state of first instead of last load
411aa8
  - JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
411aa8
  - JDK-8238534: Deep sign macOS bundles before bundle archive is being created
411aa8
  - JDK-8238591: CTW: Split applications/ctw/modules/jdk_localedata.java
411aa8
  - JDK-8238596: AVX enabled by default for Skylake even when unsupported
411aa8
  - JDK-8238811: C2: assert(i >= req() || i == 0 || is_Region() || is_Phi()) with -XX:+VerifyGraphEdges
411aa8
  - JDK-8239005: [TESTBUG] test/hotspot/jtreg/runtime/StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must initialize static state before calling do_overflow()
411aa8
  - JDK-8239466: Loss of precision in counter decay calculation in 11u backport of JDK-8237375
411aa8
  - JDK-8239856: [ntintel] asserts about copying unaligned array element
411aa8
  - JDK-8240724: [test] jdk11 downport of 8224475 misses binary file test/jdk/javax/swing/JTextPane/arrow.png
411aa8
  - JDK-8241296: Segfault in JNIHandleBlock::oops_do()
411aa8
411aa8
Notes on individual issues:
411aa8
===========================
411aa8
411aa8
security-libs/javax.xml.crypto:
411aa8
411aa8
JDK-8239467: Apache Santuario Library Updated to Version 2.1.4
411aa8
==============================================================
411aa8
The Apache Santuario library has been upgraded to version 2.1.4. As a
411aa8
result, a new system property
411aa8
`com.sun.org.apache.xml.internal.security.parser.pool-size` has been
411aa8
introduced.
411aa8
411aa8
This new system property sets the pool size of the internal
411aa8
`DocumentBuilder` cache used when processing XML Signatures. The
411aa8
function is equivalent to the
411aa8
`org.apache.xml.security.parser.pool-size` system property used in
411aa8
Apache Santuario and has the same default value of 20.