Blame SOURCES/NEWS

673b76
Key:
673b76
673b76
JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X
673b76
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
673b76
4398fb
New in release OpenJDK 11.0.18 (2023-01-17):
4398fb
=============================================
4398fb
Live versions of these release notes can be found at:
4398fb
  * https://bit.ly/openjdk11018
4398fb
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.18.html
4398fb
4398fb
* Other changes
4398fb
  - JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
4398fb
  - JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider
4398fb
  - JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails in Windows
4398fb
  - JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
4398fb
  - JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java fails
4398fb
  - JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java failed
4398fb
  - JDK-8029633: Raw inner class constructor ref should not perform diamond inference
4398fb
  - JDK-8030121: java/awt/dnd/MissingDragExitEventTest/MissingDragExitEventTest.java fails
4398fb
  - JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/RepaintTest.java fails
4398fb
  - JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/RobotWheelTest.java fails
4398fb
  - JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/ModalInternalFrameTest.java
4398fb
  - JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/MultiresolutionIconTest.java
4398fb
  - JDK-8172269: When checking the default behaviour for a scroll tab layout and checking the 'opaque' checkbox, the area behind tabs is not red.
4398fb
  - JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java failed with timeout
4398fb
  - JDK-8193942: Regression automated test '/open/test/jdk/javax/swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
4398fb
  - JDK-8194126: Regression automated Test '/open/test/jdk/javax/swing/JColorChooser/Test7194184.java' fails
4398fb
  - JDK-8198343: Test java/awt/print/PrinterJob/TestPgfmtSetMPA.java may fail w/o printer
4398fb
  - JDK-8199290: [TESTBUG] sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
4398fb
  - JDK-8202836: [macosx] test java/awt/Graphics/TextAAHintsTest.java fails
4398fb
  - JDK-8206125: [windows] cannot pass relative path to --with-boot-jdk
4398fb
  - JDK-8210047: some pages contain content outside of landmark region
4398fb
  - JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips testing for non-corner-case values
4398fb
  - JDK-8212096: javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException: Tag mismatch
4398fb
  - JDK-8213239: Configure cannot handle command overrides with arguments
4398fb
  - JDK-8215571: jdb does not include jdk.* in the default class filter
4398fb
  - JDK-8217032: Check pandoc capabilities in configure
4398fb
  - JDK-8222091: Javadoc does not handle package annotations correctly on package-info.java
4398fb
  - JDK-8222251: preflow visitor is not visiting lambda expressions
4398fb
  - JDK-8226236: win32: gc/metaspace/TestCapacityUntilGCWrapAround.java fails
4398fb
  - JDK-8227179: Test for new gc+metaspace=info output format
4398fb
  - JDK-8227651: Tests fail with SSLProtocolException: Input record too big
4398fb
  - JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java fails on 32-bit platforms
4398fb
  - JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on macOs
4398fb
  - JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java fails on macos
4398fb
  - JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on MacOS
4398fb
  - JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on macos
4398fb
  - JDK-8239708: Split basics.m4 into basic.m4 and util.m4
4398fb
  - JDK-8240281: Remove failing assertion code when selecting first memory state in SuperWord::co_locate_pack
4398fb
  - JDK-8242468: VS2019 build missing vcruntime140_1.dll
4398fb
  - JDK-8243565: some gc tests use 'test.java.opts' and not 'test.vm.opts'
4398fb
  - JDK-8243568: serviceability/logging/TestLogRotation.java uses 'test.java.opts' and not 'test.vm.opts'
4398fb
  - JDK-8244010: Simplify usages of ProcessTools.createJavaProcessBuilder in our tests
4398fb
  - JDK-8244557: test/jdk/javax/swing/JTabbedPane/TestBackgroundScrollPolicy.java failed
4398fb
  - JDK-8247676: vcruntime140_1.dll is not needed on 32-bit Windows
4398fb
  - JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and j/l/StringBuilder/HugeCapacity.java tests shouldn't be @ignore-d
4398fb
  - JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing "Evacuation failure" message
4398fb
  - JDK-8254874: ZGC: JNIHandleBlock verification failure in stack watermark processing
4398fb
  - JDK-8254976: Re-enable swing jtreg tests which were broken due to samevm mode
4398fb
  - JDK-8255439: System Tray icons get corrupted when Windows scaling changes
4398fb
  - JDK-8256109: Create implementation for NSAccessibilityButton protocol
4398fb
  - JDK-8257679: Improved unix compatibility layer in Windows build (winenv)
4398fb
  - JDK-8257722: Improve "keytool -printcert -jarfile" output
4398fb
  - JDK-8258005: JDK build fails with incorrect fixpath script
4398fb
  - JDK-8259485: Document need for short paths when building on Windows
4398fb
  - JDK-8260272: bash configure --prefix does not work after JDK-8257679
4398fb
  - JDK-8261336: IGV: enhance default filters
4398fb
  - JDK-8261445: Use memory_order_relaxed for os::random().
4398fb
  - JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if ergonomics detect too small InitialHeapSize
4398fb
  - JDK-8263326: Remove ReceiverTypeData check from serviceability/sa/TestPrintMdo.java
4398fb
  - JDK-8263871: On sem_destroy() failing we should assert
4398fb
  - JDK-8264593: debug.cpp utilities should be available in product builds.
4398fb
  - JDK-8264666: Change implementation of safeAdd/safeMult in the LCMSImageLayout class
4398fb
  - JDK-8266082: AssertionError in Annotate.fromAnnotations with -Xdoclint
4398fb
  - JDK-8266967: debug.cpp utility find() should print Java Object fields.
4398fb
  - JDK-8268361: Fix the infinite loop in next_line
4398fb
  - JDK-8268860: Windows-Aarch64 build is failing in GitHub actions
4398fb
  - JDK-8268893: jcmd to trim the glibc heap
4398fb
  - JDK-8269029: compiler/codegen/TestCharVect2.java fails for client VMs
4398fb
  - JDK-8269873: serviceability/sa/Clhsdb tests are using a C2 specific VMStruct field
4398fb
  - JDK-8272123: Problem list 4 jtreg tests which regularly fail on macos-aarch64
4398fb
  - JDK-8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints
4398fb
  - JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368
4398fb
  - JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails on macOS 12
4398fb
  - JDK-8273685: Remove jtreg tag manual=yesno for  java/awt/Graphics/LCDTextAndGraphicsState.java & show test instruction
4398fb
  - JDK-8274029: Remove jtreg tag manual=yesno for  java/awt/print/Dialog/DialogOrient.java
4398fb
  - JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/ImageTypes.java & show test UI
4398fb
  - JDK-8274296: Update or Problem List tests which may fail with uiScale=2 on macOS
4398fb
  - JDK-8274456: Remove jtreg tag manual=yesno  java/awt/print/PrinterJob/PageDialogTest.java
4398fb
  - JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java fails when GC cycles are not happening
4398fb
  - JDK-8274597: Some of the dnd tests time out and fail intermittently
4398fb
  - JDK-8275170: Some jtreg sound tests should be marked with sound keyword
4398fb
  - JDK-8275535: Retrying a failed authentication on multiple LDAP servers can lead to users blocked
4398fb
  - JDK-8276841: Add support for Visual Studio 2022
4398fb
  - JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by ignoring /run/user/* mount points
4398fb
  - JDK-8277497: Last column cell in the JTable row is read as empty cell
4398fb
  - JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode
4398fb
  - JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java fails with "tag mismatch"
4398fb
  - JDK-8279066: entries.remove(entry) is useless in PKCS12KeyStore
4398fb
  - JDK-8279695: [TESTBUG] modify compiler/loopopts/TestSkeletonPredicateNegation.java to run on C1 also
4398fb
  - JDK-8280158: New test from JDK-8274736 failed with/without patch in JDK11u
4398fb
  - JDK-8280550: SplittableRandom#nextDouble(double,double) can return result >= bound
4398fb
  - JDK-8280863: Update build README to reflect that MSYS2 is supported
4398fb
  - JDK-8280890: Cannot use '-Djava.system.class.loader' with class loader in signed JAR
4398fb
  - JDK-8280948: Write a regression test for JDK-4659800
4398fb
  - JDK-8280950: RandomGenerator:NextDouble() default behavior non conformant after JDK-8280550 fix
4398fb
  - JDK-8281183: RandomGenerator:NextDouble() default behavior partially fixed by JDK-8280950
4398fb
  - JDK-8281296: Create a regression test for JDK-4515999
4398fb
  - JDK-8281297: TestStressG1Humongous fails with guarantee(is_range_uncommitted)
4398fb
  - JDK-8282046: Create a regression test for JDK-8000326
4398fb
  - JDK-8282276: Problem list failing two Robot Screen Capture tests
4398fb
  - JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid link access
4398fb
  - JDK-8282345: handle latest VS2022 in abstract_vm_version
4398fb
  - JDK-8282402: Create a regression test for JDK-4666101
4398fb
  - JDK-8282640: Create a test for JDK-4740761
4398fb
  - JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/LoadUnloadGC2.java fails intermittently with exit code 1
4398fb
  - JDK-8282730: LdapLoginModule throw NPE from logout method after login failure
4398fb
  - JDK-8282777: Create a Regression test for JDK-4515031
4398fb
  - JDK-8282778: Create a regression test for JDK-4699544
4398fb
  - JDK-8282857: Create a regression test for JDK-4702690
4398fb
  - JDK-8282936: Write a regression test for JDK-4615365
4398fb
  - JDK-8282937: Write a regression test for JDK-4820080
4398fb
  - JDK-8283199: Linux os::cpu_microcode_revision() stalls cold startup
4398fb
  - JDK-8283422: Create a new test for JDK-8254790
4398fb
  - JDK-8284294: Create an automated regression test for RFE 4138746
4398fb
  - JDK-8284358: Unreachable loop is not removed from C2 IR, leading to a broken graph
4398fb
  - JDK-8284521: Write an automated regression test for RFE 4371575
4398fb
  - JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox
4398fb
  - JDK-8284732: FFI_GO_CLOSURES macro not defined but required for zero build on Mac OS X
4398fb
  - JDK-8284752: Zero does not build on Mac OS X due to missing os::current_thread_enable_wx implementation
4398fb
  - JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java failed with "AssertionError: Expected IOException to be thrown, but nothing was thrown"
4398fb
  - JDK-8284884: Replace polling with waiting in javax/swing/text/html/parser/Parser/8078268/bug8078268.java
4398fb
  - JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile fails when named value doesn't exist
4398fb
  - JDK-8285305: Create an automated test for JDK-4495286
4398fb
  - JDK-8285373: Create an automated test for JDK-4702233
4398fb
  - JDK-8285604: closed sun/java2d/GdiRendering/ClipShapeRendering.java failed with "Incorrect color ffeeeeee instead of ff0000ff in pixel (100, 100)"
4398fb
  - JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/PrintARGBImage.java manual test
4398fb
  - JDK-8285698: Create a test to check the focus stealing of JPopupMenu from JComboBox
4398fb
  - JDK-8285794: AsyncGetCallTrace might acquire a lock via JavaThread::thread_from_jni_environment
4398fb
  - JDK-8285836: sun/net/www/http/KeepAliveCache/KeepAliveProperty.java failed with "RuntimeException: Failed in server"
4398fb
  - JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/AttachReturnError.java fails on Alpine
4398fb
  - JDK-8286624: Regression Test CoordinateTruncationBug.java fails on OL8.3
4398fb
  - JDK-8286663: Resolve IDE warnings in WTrayIconPeer and SystemTray
4398fb
  - JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/DropTargetInInternalFrameTest.html times out and fails in Windows
4398fb
  - JDK-8286872: Refactor add/modify notification icon (TrayIcon)
4398fb
  - JDK-8287076: Document.normalizeDocument() produces different results
4398fb
  - JDK-8287091: aarch64 : guarantee(val < (1ULL << nbits)) failed: Field too big for insn
4398fb
  - JDK-8287425: Remove unnecessary register push for MacroAssembler::check_klass_subtype_slow_path
4398fb
  - JDK-8287609: macOS: SIGSEGV at [CoreFoundation] CFArrayGetCount / sun.font.CFont.getTableBytesNative
4398fb
  - JDK-8287724: Fix various issues with msys2
4398fb
  - JDK-8287826: javax/accessibility/4702233/AccessiblePropertiesTest.java fails to compile
4398fb
  - JDK-8287895: Some langtools tests fail on msys2
4398fb
  - JDK-8287896: PropertiesTest.sh fail on msys2
4398fb
  - JDK-8287902: UnreadableRB case in MissingResourceCauseTest is not working reliably on Windows
4398fb
  - JDK-8287917: System.loadLibrary does not work on Big Sur if JDK is built with macOS SDK 10.15 and earlier
4398fb
  - JDK-8288132: Update test artifacts in QuoVadis CA interop tests
4398fb
  - JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit compiling xerces
4398fb
  - JDK-8288377: [REDO] DST not applying properly with zone id offset set with TZ env variable
4398fb
  - JDK-8288445: AArch64: C2 compilation fails with guarantee(!true || (true && (shift != 0))) failed: impossible encoding
4398fb
  - JDK-8288599: com/sun/management/OperatingSystemMXBean/TestTotalSwap.java: Expected total swap size ... but getTotalSwapSpaceSize returned ...
4398fb
  - JDK-8288985: P11TlsKeyMaterialGenerator should work with ChaCha20-Poly1305
4398fb
  - JDK-8289043: C2: Vector constant materialization attempt
4398fb
  - JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java fails on linux ppc64le machine with missing Memory and Swap Limit output
4398fb
  - JDK-8290207: Missing notice in dom.md
4398fb
  - JDK-8290209: jcup.md missing additional text
4398fb
  - JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1
4398fb
  - JDK-8290529: C2: assert(BoolTest(btest).is_canonical()) failure
4398fb
  - JDK-8290705: StringConcat::validate_mem_flow asserts with "unexpected user: StoreI"
4398fb
  - JDK-8290711: assert(false) failed: infinite loop in PhaseIterGVN::optimize
4398fb
  - JDK-8290781: Segfault at PhaseIdealLoop::clone_loop_handle_data_uses
4398fb
  - JDK-8291459: JVM crash with GenerateOopMap::error_work(char const*, __va_list_tag*)
4398fb
  - JDK-8291461: assert(false) failed: bad AD file
4398fb
  - JDK-8292083: Detected container memory limit may exceed physical machine memory
4398fb
  - JDK-8292158: AES-CTR cipher state corruption with AVX-512
4398fb
  - JDK-8292541: [Metrics] Reported memory limit may exceed physical machine memory
4398fb
  - JDK-8292682: Code change of JDK-8282730 not updated to reflect CSR update
4398fb
  - JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString wrong placing of free
4398fb
  - JDK-8292866: Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check MultiByteToWideChar return value for failures
4398fb
  - JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
4398fb
  - JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX platform
4398fb
  - JDK-8293044: C1: Missing access check on non-accessible class
4398fb
  - JDK-8293472: Incorrect container resource limit detection if manual cgroup fs mounts present
4398fb
  - JDK-8293540: [Metrics] Incorrectly detected resource limits with additional cgroup fs mounts
4398fb
  - JDK-8293578: Duplicate ldc generated by javac
4398fb
  - JDK-8293672: Update freetype md file
4398fb
  - JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent
4398fb
  - JDK-8293826: Closed test fails after JDK-8276108 on aarch64
4398fb
  - JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java still fails when GC cycles are not happening
4398fb
  - JDK-8293834: Update CLDR data following tzdata 2022c update
4398fb
  - JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC
4398fb
  - JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
4398fb
  - JDK-8294307: ISO 4217 Amendment 173 Update
4398fb
  - JDK-8294357: (tz) Update Timezone Data to 2022d
4398fb
  - JDK-8294578: [PPC64] C2: Missing is_oop information when using disjoint compressed oops mode
4398fb
  - JDK-8294740: Add cgroups keyword to TestDockerBasic.java
4398fb
  - JDK-8295173: (tz) Update Timezone Data to 2022e
4398fb
  - JDK-8295288: Some vm_flags tests associate with a wrong BugID
4398fb
  - JDK-8295322: Tests for JDK-8271459 were not backported to 11u
4398fb
  - JDK-8295429: Update harfbuzz md file
4398fb
  - JDK-8295469: S390X: Optimized builds are broken
4398fb
  - JDK-8295554: Move the "sizecalc.h" to the correct location
4398fb
  - JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
4398fb
  - JDK-8295714: GHA ::set-output is deprecated and will be removed
4398fb
  - JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr check before frame constructor
4398fb
  - JDK-8295952: Problemlist existing compiler/rtm tests also on x86
4398fb
  - JDK-8296108: (tz) Update Timezone Data to 2022f
4398fb
  - JDK-8296480: java/security/cert/pkix/policyChanges/TestPolicy.java is failing
4398fb
  - JDK-8296485: BuildEEBasicConstraints.java test fails with SunCertPathBuilderException
4398fb
  - JDK-8296496: Overzealous check in sizecalc.h prevents large memory allocation
4398fb
  - JDK-8296632: Write a test to verify the content change of TextArea sends TextEvent
4398fb
  - JDK-8296652: Restore windows aarch64 fixpath patch that was removed in 8239708
4398fb
  - JDK-8296715: CLDR v42 update for tzdata 2022f
4398fb
  - JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
4398fb
  - JDK-8297147: UnexpectedSourceImageSize test times out on slow machines when fastdebug is used
4398fb
  - JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java fails again
4398fb
  - JDK-8297241: Update sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
4398fb
  - JDK-8297481: Create a regression test for JDK-4424517
4398fb
  - JDK-8297656: AArch64: Enable AES/GCM Intrinsics
4398fb
  - JDK-8297804: (tz) Update Timezone Data to 2022g
4398fb
  - JDK-8298737: 8296772 backport to jdk11u caused build error on sparc
4398fb
4398fb
Notes on individual issues:
4398fb
===========================
4398fb
4398fb
security-libs/javax.crypto:
4398fb
4398fb
JDK-6782021: Windows KeyStore Updated to Include Access to the Local Machine Location
4398fb
=====================================================================================
4398fb
The Windows KeyStore support in the SunMSCAPI provider has been
4398fb
expanded to include access to the local machine location. The new
4398fb
keystore types are:
4398fb
4398fb
* "Windows-MY-LOCALMACHINE"
4398fb
* "Windows-ROOT-LOCALMACHINE"
4398fb
4398fb
The following keystore types were also added, allowing developers to
4398fb
make it clear they map to the current user:
4398fb
4398fb
* "Windows-MY-CURRENTUSER" (same as "Windows-MY")
4398fb
* "Windows-ROOT-CURRENTUSER" (same as "Windows-ROOT")
4398fb
4398fb
security-libs/java.security:
4398fb
4398fb
JDK-8282730: New Implementation Note for LoginModule on Removing Null from a Principals or Credentials Set
4398fb
==========================================================================================================
4398fb
Back in OpenJDK 9, JDK-8015081 changed the Set implementation used to
4398fb
hold principals and credentials so that it rejected null
4398fb
values. Attempts to call add(null), contains(null) or remove(null)
4398fb
were changed to throw a NullPointerException.
4398fb
4398fb
However, the logout() methods in the LoginModule implementations
4398fb
within the JDK were not updated to check for null values, which may
4398fb
occur in the event of a failed login. As a result, a logout() call may
4398fb
throw a NullPointerException.
4398fb
4398fb
The LoginModule implementations have now been updated with such checks
4398fb
and an implementation note added to the specification to suggest that
4398fb
the same change is made in third party modules.  Developers of third
4398fb
party modules are advised to verify that their logout() method does not
4398fb
throw a NullPointerException.
4398fb
4398fb
New in release OpenJDK 11.0.17 (2022-10-18):
4398fb
=============================================
4398fb
Live versions of these release notes can be found at:
4398fb
  * https://bit.ly/openjdk11017
4398fb
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.17.html
4398fb
4398fb
* Security fixes
4398fb
  - JDK-8282252: Improve BigInteger/Decimal validation
4398fb
  - JDK-8285662: Better permission resolution
4398fb
  - JDK-8286077, CVE-2022-21618: Wider MultiByte conversions
4398fb
  - JDK-8286511: Improve macro allocation
4398fb
  - JDK-8286519: Better memory handling
4398fb
  - JDK-8286526, CVE-2022-21619: Improve NTLM support
4398fb
  - JDK-8286533, CVE-2022-21626: Key X509 usages
4398fb
  - JDK-8286910, CVE-2022-21624: Improve JNDI lookups
4398fb
  - JDK-8286918, CVE-2022-21628: Better HttpServer service
4398fb
  - JDK-8287446: Enhance icon presentations
4398fb
  - JDK-8288508: Enhance ECDSA usage
4398fb
  - JDK-8289366, CVE-2022-39399: Improve HTTP/2 client usage
4398fb
  - JDK-8289853: Update HarfBuzz to 4.4.1
4398fb
  - JDK-8290334: Update FreeType to 2.12.1
4398fb
  - JDK-8293429: [11u] minor update in attribute style
4398fb
* Other changes
4398fb
  - JDK-6606767: resexhausted00[34] fail assert(!thread->owns_locks(), "must release all locks when leaving VM")
4398fb
  - JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14 & jdk7
4398fb
  - JDK-7131823: bug in GIFImageReader
4398fb
  - JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/bug4634626.java sometimes failed on mac
4398fb
  - JDK-8028265: Add legacy tz tests to OpenJDK
4398fb
  - JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java to use jtreg @requires
4398fb
  - JDK-8139348: Deprecate 3DES and RC4 in Kerberos
4398fb
  - JDK-8159694: HiDPI, Unity, java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
4398fb
  - JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption
4398fb
  - JDK-8169468: NoResizeEventOnDMChangeTest.java fails because FS Window didn't receive all resizes!
4398fb
  - JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The selected index should be "aad"
4398fb
  - JDK-8183372: Refactor java/lang/Class shell tests to java
4398fb
  - JDK-8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names
4398fb
  - JDK-8193462: Fix Filer handling of package-info initial elements
4398fb
  - JDK-8203277: preflow visitor used during lambda attribution shouldn't visit class definitions inside the lambda body
4398fb
  - JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails with "Prompt is not received during 300200 milliseconds"
4398fb
  - JDK-8209052: Low contrast in docs/api/constant-values.html
4398fb
  - JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails with NullPointerException when running in CDS mode
4398fb
  - JDK-8210107: vmTestbase/nsk/stress/network tests fail with Cannot assign requested address (Bind failed)
4398fb
  - JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3 generate incorrect messages upon failure
4398fb
  - JDK-8210960: Allow --with-boot-jdk-jvmargs to work during configure
4398fb
  - JDK-8212904: JTextArea line wrapping incorrect when using UI scale
4398fb
  - JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in some configs
4398fb
  - JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
4398fb
  - JDK-8214427: probable bug in logic of ConcurrentHashMap.addCount()
4398fb
  - JDK-8215291: Broken links when generating from project without modules
4398fb
  - JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java timed out
4398fb
  - JDK-8217332: JTREG: Clean up, use generics instead of raw types
4398fb
  - JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003 and 004 use wrong path to test classes
4398fb
  - JDK-8218413: make reconfigure ignores configure-time AUTOCONF environment variable
4398fb
  - JDK-8219074: [TESTBUG] runtime/containers/docker/TestCPUAwareness.java typo of printing parameters (period should be shares)
4398fb
  - JDK-8219149: ProcessTools.ProcessBuilder should print timing info for subprocesses
4398fb
  - JDK-8220744: [TESTBUG] Move RedefineTests from runtime to serviceability
4398fb
  - JDK-8221871: javadoc should not set role=region on <section> elements
4398fb
  - JDK-8221907: make reconfigure breaks when configured with relative paths
4398fb
  - JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/DrawString/LCDTextSrcEa.java has issues
4398fb
  - JDK-8223575: add subspace transitions to gc+metaspace=info log lines
4398fb
  - JDK-8225122: Test AncestorResized.java fails when Windows desktop is scaled.
4398fb
  - JDK-8226976: SessionTimeOutTests uses == operator for String value check
4398fb
  - JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
4398fb
  - JDK-8233712: Limit default tests jobs based on ulimit -u setting
4398fb
  - JDK-8235870: C2 crashes in IdealLoopTree::est_loop_flow_merge_sz()
4398fb
  - JDK-8236490: Compiler bug relating to @NonNull annotation
4398fb
  - JDK-8236823: Ensure that API documentation uses minified libraries
4398fb
  - JDK-8238196: tests that use SA Attach should not be allowed to run against signed binaries on Mac OS X 10.14.5 and later
4398fb
  - JDK-8238203: Return value of GetUserDefaultUILanguage() should be handled as LANGID
4398fb
  - JDK-8238268: Many SA tests are not running on OSX because they do not attempt to use sudo when available
4398fb
  - JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed when TieredCompilation is disabled
4398fb
  - JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
4398fb
  - JDK-8239379: ProblemList serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
4398fb
  - JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with -XX:-TieredCompilation
4398fb
  - JDK-8239902: [macos] Remove direct usage of JSlider, JProgressBar classes in CAccessible class
4398fb
  - JDK-8240903: Add test to check that jmod hashes are reproducible
4398fb
  - JDK-8242188: error in jtreg test jdk/jfr/api/consumer/TestRecordedFrame.java on linux-aarch64
4398fb
  - JDK-8247546: Pattern matching does not skip correctly over supplementary characters
4398fb
  - JDK-8247907: XMLDsig logging does not work
4398fb
  - JDK-8247964: All log0() in com/sun/org/slf4j/internal/Logger.java should be private
4398fb
  - JDK-8249623: test @ignore-d due to 7013634 should be returned back to execution
4398fb
  - JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
4398fb
  - JDK-8251551: Use .md filename extension for README
4398fb
  - JDK-8252145: Unify Info.plist files with correct version strings
4398fb
  - JDK-8253829: Wrong length compared in SSPI bridge
4398fb
  - JDK-8253916: ResourceExhausted/resexhausted001 crashes on Linux-x64
4398fb
  - JDK-8254178: Remove .hgignore
4398fb
  - JDK-8254318: Remove .hgtags
4398fb
  - JDK-8255724: [XRender] the BlitRotateClippedArea test fails on Linux in the XR pipeline
4398fb
  - JDK-8255729: com.sun.tools.javac.processing.JavacFiler.FilerOutputStream  is inefficient
4398fb
  - JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted001/TestDescription.java shouldn't use timeout
4398fb
  - JDK-8258946: Fix optimization-unstable code involving signed integer overflow
4398fb
  - JDK-8261160: Add a deserialization JFR event
4398fb
  - JDK-8262085: Hovering Metal HTML Tooltips in different windows cause IllegalArgExc on Linux
4398fb
  - JDK-8264400: (fs) WindowsFileStore equality depends on how the FileStore was constructed
4398fb
  - JDK-8264792: The NumberFormat for locale sq_XK formats price incorrectly.
4398fb
  - JDK-8265020: tests must be updated for new TestNG module name
4398fb
  - JDK-8265100: (fs) WindowsFileStore.hashCode() should read cached hash code once
4398fb
  - JDK-8265531: doc/building.md should mention homebrew install freetype
4398fb
  - JDK-8266250: WebSocketTest and WebSocketProxyTest call assertEquals(List<byte[]>, List<byte[]>)
4398fb
  - JDK-8266254: Update to use jtreg 6
4398fb
  - JDK-8266460: java.io tests fail on null stream with upgraded jtreg/TestNG
4398fb
  - JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static @Test methods
4398fb
  - JDK-8266490: Extend the OSContainer API to support the pids controller of cgroups
4398fb
  - JDK-8266675: Optimize IntHashTable for encapsulation and ease of use
4398fb
  - JDK-8266774: System property values for stdout/err on Windows UTF-8
4398fb
  - JDK-8266881: Enable debug log for SSLEngineExplorerMatchedSNI.java
4398fb
  - JDK-8267180: Typo in copyright header  for HashesTest
4398fb
  - JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java expectedNewSize calculation
4398fb
  - JDK-8267880: Upgrade the default PKCS12 MAC algorithm
4398fb
  - JDK-8268185: Update GitHub Actions for jtreg 6
4398fb
  - JDK-8269039: Disable SHA-1 Signed JARs
4398fb
  - JDK-8269517: compiler/loopopts/TestPartialPeelingSinkNodes.java crashes with -XX:+VerifyGraphEdges
4398fb
  - JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over projections
4398fb
  - JDK-8270312: Error: Not a test or directory containing tests: java/awt/print/PrinterJob/XparColor.java
4398fb
  - JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/TestDescription.java crashes intermittently
4398fb
  - JDK-8271078: jdk/incubator/vector/Float128VectorTests.java failed a subtest
4398fb
  - JDK-8271512: ProblemList serviceability/sa/sadebugd/DebugdConnectTest.java due to 8270326
4398fb
  - JDK-8272352: Java launcher can not parse Chinese character when system locale is set to UTF-8
4398fb
  - JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
4398fb
  - JDK-8273526: Extend the OSContainer API  pids controller with pids.current
4398fb
  - JDK-8274506: TestPids.java and TestPidsLimit.java fail with podman run as root
4398fb
  - JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java fails with expected [true] but found [false]
4398fb
  - JDK-8274687: JDWP deadlocks if some Java thread reaches wait in blockOnDebuggerSuspend
4398fb
  - JDK-8275008: gtest build failure due to stringop-overflow warning with gcc11
4398fb
  - JDK-8275689: [TESTBUG] Use color tolerance only for XRender in BlitRotateClippedArea test
4398fb
  - JDK-8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled
4398fb
  - JDK-8277893: Arraycopy stress tests
4398fb
  - JDK-8278067: Make HttpURLConnection default keep alive timeout configurable
4398fb
  - JDK-8278344: sun/security/pkcs12/KeytoolOpensslInteropTest.java test fails because of different openssl output
4398fb
  - JDK-8278519: serviceability/jvmti/FieldAccessWatch/FieldAccessWatch.java failed "assert(handle != __null) failed: JNI handle should not be null"
4398fb
  - JDK-8279032: compiler/loopopts/TestSkeletonPredicateNegation.java times out with -XX:TieredStopAtLevel < 4
4398fb
  - JDK-8279385: [test]  Adjust sun/security/pkcs12/KeytoolOpensslInteropTest.java after 8278344
4398fb
  - JDK-8279622: C2: miscompilation of map pattern as a vector reduction
4398fb
  - JDK-8280913: Create a regression test for JRootPane.setDefaultButton() method
4398fb
  - JDK-8281181: Do not use CPU Shares to compute active processor count
4398fb
  - JDK-8281535: Create a regression test for JDK-4670051
4398fb
  - JDK-8281569: Create tests for Frame.setMinimumSize() method
4398fb
  - JDK-8281628: KeyAgreement : generateSecret intermittently not resetting
4398fb
  - JDK-8281738: Create a regression test for checking the 'Space' key activation of focused Button
4398fb
  - JDK-8281745: Create a regression test for JDK-4514331
4398fb
  - JDK-8281988: Create a regression test for JDK-4618767
4398fb
  - JDK-8282214: Upgrade JQuery to version 3.6.0
4398fb
  - JDK-8282234: Create a regression test for JDK-4532513
4398fb
  - JDK-8282280: Update Xerces to Version 2.12.2
4398fb
  - JDK-8282343: Create a regression test for JDK-4518432
4398fb
  - JDK-8282538: PKCS11 tests fail on CentOS Stream 9
4398fb
  - JDK-8282548: Create a regression test for JDK-4330998
4398fb
  - JDK-8282555: Missing memory edge when spilling MoveF2I, MoveD2L etc
4398fb
  - JDK-8282789: Create a regression test for the JTree usecase of JDK-4618767
4398fb
  - JDK-8282860: Write a regression test for JDK-4164779
4398fb
  - JDK-8282933: Create a test for JDK-4529616
4398fb
  - JDK-8282947: JFR: Dump on shutdown live-locks in some conditions
4398fb
  - JDK-8283015: Create a test for JDK-4715496
4398fb
  - JDK-8283017: GHA: Workflows break with update release versions
4398fb
  - JDK-8283087: Create a test or JDK-4715503
4398fb
  - JDK-8283245: Create a test for JDK-4670319
4398fb
  - JDK-8283277: ISO 4217 Amendment 171 Update
4398fb
  - JDK-8283441: C2: segmentation fault in ciMethodBlocks::make_block_at(int)
4398fb
  - JDK-8283493: Create an automated regression test for RFE 4231298
4398fb
  - JDK-8283507: Create a regression test for RFE 4287690
4398fb
  - JDK-8283621: Write a regression test for CCC4400728
4398fb
  - JDK-8283623: Create an automated regression test for JDK-4525475
4398fb
  - JDK-8283624: Create an automated regression test for RFE-4390885
4398fb
  - JDK-8283712: Create a manual test framework class
4398fb
  - JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix test
4398fb
  - JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
4398fb
  - JDK-8283903: GetContainerCpuLoad does not return the correct result in share mode
4398fb
  - JDK-8284077: Create an automated test for JDK-4170173
4398fb
  - JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
4398fb
  - JDK-8284535: Fix PrintLatinCJKTest.java test that is failing with Parse Exception
4398fb
  - JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks charset
4398fb
  - JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
4398fb
  - JDK-8284754: print more interesting env variables in hs_err and VM.info
4398fb
  - JDK-8284758: [linux] improve print_container_info
4398fb
  - JDK-8284882: SIGSEGV in Node::verify_edges due to compilation bailout
4398fb
  - JDK-8284898: Enhance PassFailJFrame
4398fb
  - JDK-8284944: assert(cnt++ < 40) failed: infinite cycle in loop optimization
4398fb
  - JDK-8284950: CgroupV1 detection code should consider memory.swappiness
4398fb
  - JDK-8284956: Potential leak awtImageData/color_data when initializes X11GraphicsEnvironment
4398fb
  - JDK-8285081: Improve XPath operators count accuracy
4398fb
  - JDK-8285097: Duplicate XML keys in XPATHErrorResources.java and XSLTErrorResources.java
4398fb
  - JDK-8285380: Fix typos in security
4398fb
  - JDK-8285398: Cache the results of constraint checks
4398fb
  - JDK-8285693: Create an automated test for JDK-4702199
4398fb
  - JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg'  is null
4398fb
  - JDK-8285728: Alpine Linux build fails with busybox tar
4398fb
  - JDK-8285820: C2: LCM prioritizes locally dependent CreateEx nodes over projections after 8270090
4398fb
  - JDK-8286114: [test] show real exception in bomb call in sun/rmi/runtime/Log/checkLogging/CheckLogging.java
4398fb
  - JDK-8286177: C2: "failed: non-reduction loop contains reduction nodes" assert failure
4398fb
  - JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
4398fb
  - JDK-8286314: Trampoline not created for far runtime targets outside small CodeCache
4398fb
  - JDK-8286582: Build fails on macos aarch64 when using --with-zlib=bundled
4398fb
  - JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
4398fb
  - JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
4398fb
  - JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts with freezer controller
4398fb
  - JDK-8287202: GHA: Add macOS aarch64 to the list of default platforms for workflow_dispatch event
4398fb
  - JDK-8287223: C1: Inlining attempt through MH::invokeBasic() with null receiver
4398fb
  - JDK-8287336: GHA: Workflows break on patch versions
4398fb
  - JDK-8287366: Improve test failure reporting in GHA
4398fb
  - JDK-8287432: C2: assert(tn->in(0) != __null) failed: must have live top node
4398fb
  - JDK-8287463: JFR: Disable TestDevNull.java on Windows
4398fb
  - JDK-8287663: Add a regression test for JDK-8287073
4398fb
  - JDK-8287672: jtreg test com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails intermittently in nightly run
4398fb
  - JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer controller) was incomplete
4398fb
  - JDK-8288360: CI: ciInstanceKlass::implementor() is not consistent for well-known classes
4398fb
  - JDK-8288467: remove memory_operand assert for spilled instructions
4398fb
  - JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
4398fb
  - JDK-8288763: Pack200 extraction failure with invalid size
4398fb
  - JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too small
4398fb
  - JDK-8288865: [aarch64] LDR instructions must use legitimized addresses
4398fb
  - JDK-8288928: Incorrect GPL header in pnglibconf.h (backport of JDK-8185041)
4398fb
  - JDK-8289471: Issue in Initialization of keys in ErrorMsg.java and XPATHErrorResources.java
4398fb
  - JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on muslc
4398fb
  - JDK-8289486: Improve XSLT XPath operators count efficiency
4398fb
  - JDK-8289549: ISO 4217 Amendment 172 Update
4398fb
  - JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails on Alpine/musl
4398fb
  - JDK-8289799: Build warning in methodData.cpp memset zero-length parameter
4398fb
  - JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime() after JDK-8289060
4398fb
  - JDK-8290000: Bump macOS GitHub actions to macOS 11
4398fb
  - JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC
4398fb
  - JDK-8290198: Shenandoah: a few Shenandoah tests failure after JDK-8214799 11u backport
4398fb
  - JDK-8290246: test fails "assert(init != __null) failed: initialization not found"
4398fb
  - JDK-8290813: jdk/nashorn/api/scripting/test/ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
4398fb
  - JDK-8290886: [11u]: Backport of JDK-8266250 introduced test failures
4398fb
  - JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
4398fb
  - JDK-8291713: assert(!phase->exceeding_node_budget()) failed: sanity after JDK-8223389
4398fb
  - JDK-8291794: [11u] Corrections after backport of JDK-8212028
4398fb
  - JDK-8292579: (tz) Update Timezone Data to 2022c
4398fb
  - JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after JDK-8292768
4398fb
  - JDK-8295057: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
4398fb
4398fb
Notes on individual issues:
4398fb
===========================
4398fb
4398fb
core-libs/java.net:
4398fb
4398fb
JDK-8278067: Make HttpURLConnection Default Keep Alive Timeout Configurable
4398fb
===========================================================================
4398fb
Two system properties have been added which control the keep alive
4398fb
behavior of HttpURLConnection in the case where the server does not
4398fb
specify a keep alive time. Two properties are defined for controlling
4398fb
connections to servers and proxies separately. They are:
4398fb
4398fb
* `http.keepAlive.time.server`
4398fb
* `http.keepAlive.time.proxy`
4398fb
4398fb
respectively. More information about them can be found on the
4398fb
Networking Properties page:
4398fb
https://docs.oracle.com/en/java/javase/19/docs/api/java.base/java/net/doc-files/net-properties.html.
4398fb
4398fb
JDK-8286918: Better HttpServer service
4398fb
======================================
4398fb
The HttpServer can be optionally configured with a maximum connection
4398fb
limit by setting the jdk.httpserver.maxConnections system property. A
4398fb
value of 0 or a negative integer is ignored and considered to
4398fb
represent no connection limit. In the case of a positive integer
4398fb
value, any newly accepted connections will be first checked against
4398fb
the current count of established connections and, if the configured
4398fb
limit has been reached, then the newly accepted connection will be
4398fb
closed immediately.
4398fb
4398fb
hotspot/runtime:
4398fb
4398fb
JDK-8281181: CPU Shares Ignored When Computing Active Processor Count
4398fb
=====================================================================
4398fb
Previous JDK releases used an incorrect interpretation of the Linux
4398fb
cgroups parameter "cpu.shares". This might cause the JVM to use fewer
4398fb
CPUs than available, leading to an under utilization of CPU resources
4398fb
when the JVM is used inside a container.
4398fb
4398fb
Starting from this JDK release, by default, the JVM no longer
4398fb
considers "cpu.shares" when deciding the number of threads to be used
4398fb
by the various thread pools. The `-XX:+UseContainerCpuShares`
4398fb
command-line option can be used to revert to the previous
4398fb
behavior. This option is deprecated and may be removed in a future JDK
4398fb
release.
4398fb
4398fb
security-libs/java.security:
4398fb
4398fb
JDK-8269039: Disabled SHA-1 Signed JARs
4398fb
=======================================
4398fb
JARs signed with SHA-1 algorithms are now restricted by default and
4398fb
treated as if they were unsigned. This applies to the algorithms used
4398fb
to digest, sign, and optionally timestamp the JAR. It also applies to
4398fb
the signature and digest algorithms of the certificates in the
4398fb
certificate chain of the code signer and the Timestamp Authority, and
4398fb
any CRLs or OCSP responses that are used to verify if those
4398fb
certificates have been revoked. These restrictions also apply to
4398fb
signed JCE providers.
4398fb
4398fb
To reduce the compatibility risk for JARs that have been previously
4398fb
timestamped, there is one exception to this policy:
4398fb
4398fb
- Any JAR signed with SHA-1 algorithms and timestamped prior to
4398fb
  January 01, 2019 will not be restricted.
4398fb
4398fb
This exception may be removed in a future JDK release. To determine if
4398fb
your signed JARs are affected by this change, run:
4398fb
4398fb
$ jarsigner -verify -verbose -certs`
4398fb
4398fb
on the signed JAR, and look for instances of "SHA1" or "SHA-1" and
4398fb
"disabled" and a warning that the JAR will be treated as unsigned in
4398fb
the output.
4398fb
4398fb
For example:
4398fb
4398fb
   Signed by "CN="Signer""
4398fb
   Digest algorithm: SHA-1 (disabled)
4398fb
   Signature algorithm: SHA1withRSA (disabled), 2048-bit key
4398fb
4398fb
   WARNING: The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled by the security property:
4398fb
4398fb
   jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024, SHA1 denyAfter 2019-01-01
4398fb
4398fb
JARs affected by these new restrictions should be replaced or
4398fb
re-signed with stronger algorithms.
4398fb
4398fb
Users can, *at their own risk*, remove these restrictions by modifying
4398fb
the `java.security` configuration file (or override it by using the
4398fb
`java.security.properties` system property) and removing "SHA1 usage
4398fb
SignedJAR & denyAfter 2019-01-01" from the
4398fb
`jdk.certpath.disabledAlgorithms` security property and "SHA1
4398fb
denyAfter 2019-01-01" from the `jdk.jar.disabledAlgorithms` security
4398fb
property.
4398fb
4398fb
JDK-8267880: Upgrade the default PKCS12 MAC algorithm
4398fb
=====================================================
4398fb
4398fb
The default MAC algorithm used in a PKCS #12 keystore has been
4398fb
updated. The new algorithm is based on SHA-256 and is stronger than
4398fb
the old one based on SHA-1. See the security properties starting with
4398fb
`keystore.pkcs12` in the `java.security` file for detailed
4398fb
information.
4398fb
4398fb
The new SHA-256 based MAC algorithms were introduced in the 11.0.12
4398fb
release. Keystores created using this newer, stronger, MAC algorithm
4398fb
cannot be opened in versions of OpenJDK 11 earlier than 11.0.12. A
4398fb
'java.security.NoSuchAlgorithmException' exception will be thrown in
4398fb
such circumstances.
4398fb
4398fb
For compatibility, use the `keystore.pkcs12.legacy` system property,
4398fb
which will revert the algorithms to use the older, weaker
4398fb
algorithms. There is no value defined for this property.
4398fb
4398fb
core-libs/java.io:serialization:
4398fb
4398fb
JDK-8261160: JDK Flight Recorder Event for Deserialization
4398fb
==========================================================
4398fb
It is now possible to monitor deserialization of objects using JDK
4398fb
Flight Recorder (JFR). When JFR is enabled and the JFR configuration
4398fb
includes deserialization events, JFR will emit an event whenever the
4398fb
running program attempts to deserialize an object. The deserialization
4398fb
event is named `jdk.Deserialization`, and it is disabled by
4398fb
default. The deserialization event contains information that is used
4398fb
by the serialization filter mechanism; see the ObjectInputFilter API
4398fb
specification for details.
4398fb
4398fb
Additionally, if a filter is enabled, the JFR event indicates whether
4398fb
the filter accepted or rejected deserialization of the object. For
4398fb
further information about how to use the JFR deserialization event,
4398fb
see the article "Monitoring Deserialization to Improve Application
4398fb
Security"
4398fb
(https://inside.java/2021/03/02/monitoring-deserialization-activity-in-the-jdk/).
4398fb
4398fb
For reference information about using and configuring JFR, see the
4398fb
"JFR Runtime Guide"
4398fb
(https://docs.oracle.com/javacomponents/jmc-5-5/jfr-runtime-guide/preface_jfrrt.htm#JFRRT165)
4398fb
and "JFR Command Reference"
4398fb
(https://docs.oracle.com/javacomponents/jmc-5-5/jfr-command-reference/command-line-options.htm#JFRCR-GUID-FE61CA60-E1DF-460E-A8E0-F4FF5D58A7A0)
4398fb
sections of the JDK Mission Control documentation.
4398fb
4398fb
security-libs/org.ietf.jgss:krb5:
4398fb
4398fb
JDK-8139348: Deprecate 3DES and RC4 in Kerberos
4398fb
===============================================
4398fb
The `des3-hmac-sha1` and `rc4-hmac` Kerberos encryption types (etypes)
4398fb
are now deprecated and disabled by default. Users can set
4398fb
`allow_weak_crypto = true` in the `krb5.conf` configuration file to
4398fb
re-enable them (along with other weak etypes including `des-cbc-crc`
4398fb
and `des-cbc-md5`) at their own risk. To disable a subset of the weak
4398fb
etypes, users can list preferred etypes explicitly in any of the
4398fb
`default_tkt_enctypes`, `default_tgs_enctypes`, or
4398fb
`permitted_enctypes` settings.
4398fb
4398fb
New in release OpenJDK 11.0.16.1 (2022-08-12):
4398fb
=============================================
4398fb
Live versions of these release notes can be found at:
4398fb
  * https://bit.ly/openjdk110161
4398fb
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.16.1.txt
4398fb
4398fb
* Other changes
4398fb
  - JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
4398fb
  - JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when allocating array of size too large
4398fb
4398fb
Notes on individual issues:
4398fb
===========================
4398fb
4398fb
hotspot/compiler:
4398fb
4398fb
JDK-8292396: C2 Compilation Errors Unpredictably Crashes JVM
4398fb
============================================================
4398fb
Fixes a regression in the C2 JIT compiler which caused the Java
4398fb
Runtime to crash unpredictably.
4398fb
9e62d6
New in release OpenJDK 11.0.16 (2022-07-19):
9e62d6
=============================================
9e62d6
Live versions of these release notes can be found at:
9e62d6
  * https://bitly.com/openjdk11016
9e62d6
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.16.txt
9e62d6
9e62d6
* Security fixes
9e62d6
  - JDK-8277608: Address IP Addressing
9e62d6
  - JDK-8272243: Improve DER parsing
9e62d6
  - JDK-8272249: Better properties of loaded Properties
9e62d6
  - JDK-8281859, CVE-2022-21540: Improve class compilation
9e62d6
  - JDK-8281866, CVE-2022-21541: Enhance MethodHandle invocations
9e62d6
  - JDK-8283190: Improve MIDI processing
9e62d6
  - JDK-8284370: Improve zlib usage
9e62d6
  - JDK-8285407, CVE-2022-34169: Improve Xalan supports
9e62d6
* Other changes
9e62d6
  - JDK-6986863: ProfileDeferralMgr throwing ConcurrentModificationException
9e62d6
  - JDK-7124293: [macosx] VoiceOver reads percentages rather than the actual values for sliders.
9e62d6
  - JDK-7124301: [macosx] When in a tab group if you arrow between tabs there are no VoiceOver announcements.
9e62d6
  - JDK-8133713: [macosx] Accessible JTables always reported as empty
9e62d6
  - JDK-8139046: Compiler Control: IGVPrintLevel directive should set PrintIdealGraph
9e62d6
  - JDK-8139173: [macosx] JInternalFrame shadow is not properly drawn
9e62d6
  - JDK-8163498: Many long-running security libs tests
9e62d6
  - JDK-8166727: javac crashed: [jimage.dll+0x1942]  ImageStrings::find+0x28
9e62d6
  - JDK-8169004: Fix redundant @requires tags in tests
9e62d6
  - JDK-8181571: printing to CUPS fails on mac sandbox app
9e62d6
  - JDK-8182404: remove jdk.testlibrary.JDKToolFinder and JDKToolLauncher
9e62d6
  - JDK-8186548: move jdk.testlibrary.JcmdBase closer to tests
9e62d6
  - JDK-8192057: com/sun/jdi/BadHandshakeTest.java fails with java.net.ConnectException
9e62d6
  - JDK-8193682: Infinite loop in ZipOutputStream.close()
9e62d6
  - JDK-8199874: [TESTBUG] runtime/Thread/ThreadPriorities.java fails with "expected 0 to equal 10"
9e62d6
  - JDK-8202886: [macos] Test java/awt/MenuBar/8007006/bug8007006.java fails on MacOS
9e62d6
  - JDK-8203238: [TESTBUG] rewrite MemOptions shell test in Java
9e62d6
  - JDK-8203239: [TESTBUG] remove vmTestbase/vm/gc/kind/parOld test
9e62d6
  - JDK-8206187: javax/management/remote/mandatory/connection/DefaultAgentFilterTest.java fails with Port already in use
9e62d6
  - JDK-8206330: Revisit com/sun/jdi/RedefineCrossEvent.java
9e62d6
  - JDK-8207364: nsk/jvmti/ResourceExhausted/resexhausted003 fails to start
9e62d6
  - JDK-8208207: Test nsk/stress/jni/gclocker/gcl001 fails after co-location
9e62d6
  - JDK-8208246: flags duplications in vmTestbase_vm_g1classunloading tests
9e62d6
  - JDK-8208249: TriggerUnloadingByFillingMetaspace generates garbage class names
9e62d6
  - JDK-8208697: vmTestbase/metaspace/stressHierarchy/stressHierarchy012/TestDescription.java fails with OutOfMemoryError: Metaspace
9e62d6
  - JDK-8209150: [TESTBUG] Add logging to verify JDK-8197901 to a different test
9e62d6
  - JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh to plain java test
9e62d6
  - JDK-8209883: ZGC: Compile without C1 broken
9e62d6
  - JDK-8209920: runtime/logging/RedefineClasses.java fail with OOME with ZGC
9e62d6
  - JDK-8210022: remove jdk.testlibrary.ProcessThread, TestThread and XRun
9e62d6
  - JDK-8210039: move OSInfo to top level testlibrary
9e62d6
  - JDK-8210108: sun/tools/jstatd test build failures after JDK-8210022
9e62d6
  - JDK-8210112: remove jdk.testlibrary.ProcessTools
9e62d6
  - JDK-8210649: AssertionError @ jdk.compiler/com.sun.tools.javac.comp.Modules.enter(Modules.java:244)
9e62d6
  - JDK-8210732: remove jdk.testlibrary.Utils
9e62d6
  - JDK-8211795: ArrayIndexOutOfBoundsException in PNGImageReader after JDK-6788458
9e62d6
  - JDK-8211822: Some tests fail after JDK-8210039
9e62d6
  - JDK-8211962: Implicit narrowing in MacOSX java.desktop jsound
9e62d6
  - JDK-8212151: jdi/ExclusiveBind.java times out due to "bind failed: Address already in use" on Solaris-X64
9e62d6
  - JDK-8213440: Lingering INCLUDE_ALL_GCS in test_oopStorage_parperf.cpp
9e62d6
  - JDK-8214275: CondyRepeatFailedResolution asserts "Dynamic constant has no fixed basic type"
9e62d6
  - JDK-8214799: Add package declaration to each JTREG test case in the gc folder
9e62d6
  - JDK-8215544: SA: Modify ClhsdbLauncher to add sudo privileges to enable MacOS tests on Mach5
9e62d6
  - JDK-8216137: assert(Compile::current()->live_nodes() < Compile::current()->max_node_limit()) failed: Live Node limit exceeded limit
9e62d6
  - JDK-8216265: [testbug] Introduce Platform.sharedLibraryPathVariableName() and adapt all tests.
9e62d6
  - JDK-8216366: Add rationale to PER_CPU_SHARES define
9e62d6
  - JDK-8217017: [TESTBUG] Tests fail to compile after JDK-8216265
9e62d6
  - JDK-8217233: Update build settings for AIX/xlc
9e62d6
  - JDK-8217340: Compilation failed: tools/launcher/Test7029048.java
9e62d6
  - JDK-8217473: SA: Tests using ClhsdbLauncher fail on SAP docker containers
9e62d6
  - JDK-8218136: minor hotspot adjustments for xlclang++ from xlc16 on AIX
9e62d6
  - JDK-8218751: Do not store original classfiles inside the CDS archive
9e62d6
  - JDK-8218965: aix:  support xlclang++ in the compiler detection
9e62d6
  - JDK-8220658: Improve the readability of container information in the error log
9e62d6
  - JDK-8220813: update hotspot tier1_gc tests depending on GC to use @requires vm.gc.X
9e62d6
  - JDK-8222799: java.beans.Introspector uses an obsolete methods cache
9e62d6
  - JDK-8222926: Shenandoah build fails with --with-jvm-features=-compiler1
9e62d6
  - JDK-8223143: Restructure/clean-up for 'loopexit_or_null()'.
9e62d6
  - JDK-8223363: Bad node estimate assertion failure
9e62d6
  - JDK-8223389: Shenandoah optimizations fail with assert(!phase->exceeding_node_budget())
9e62d6
  - JDK-8223396: [TESTBUG] several jfr tests do not clean up files created in /tmp
9e62d6
  - JDK-8223502: Node estimate for loop unswitching is not correct: assert(delta <= 2 * required) failed: Bad node estimate
9e62d6
  - JDK-8224648: assert(!exceeding_node_budget()) failed: Too many NODES required! failure with ctw
9e62d6
  - JDK-8225475: Node budget asserts on x86_32/64
9e62d6
  - JDK-8227171: provide function names in native stack trace on aix with xlc16
9e62d6
  - JDK-8227389: Remove unsupported xlc16 compile options on aix
9e62d6
  - JDK-8229202: Docker reporting causes secondary crashes in error handling
9e62d6
  - JDK-8229210: [TESTBUG] Move gc stress tests from JFR directory tree to gc/stress
9e62d6
  - JDK-8229486: Replace wildcard address with loopback or local host in tests - part 21
9e62d6
  - JDK-8229499: Node budget assert in fuzzed test
9e62d6
  - JDK-8230305: Cgroups v2: Container awareness
9e62d6
  - JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java fails at-run shell MakeJAR.sh target
9e62d6
  - JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to recognize unified hierarchy
9e62d6
  - JDK-8231454: File lock in Windows on a loaded jar due to a leak in Introspector::getBeanInfo
9e62d6
  - JDK-8231489: GC watermark_0_1 failed due to "metaspace.gc.Fault: GC has happened too rare"
9e62d6
  - JDK-8231565: More node budget asserts in fuzzed tests
9e62d6
  - JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
9e62d6
  - JDK-8234382: Test tools/javac/processing/model/testgetallmembers/Main.java using too small heap
9e62d6
  - JDK-8234605: C2 failed "assert(C->live_nodes() - live_at_begin <= 2 * _nodes_required) failed: Bad node estimate: actual = 208 >> request = 101"
9e62d6
  - JDK-8234608: [TESTBUG] Fix G1 redefineClasses tests and a memory leak
9e62d6
  - JDK-8235220: ClhsdbScanOops.java fails with sun.jvm.hotspot.types.WrongTypeException
9e62d6
  - JDK-8235385: Crash on aarch64 JDK due to long offset
9e62d6
  - JDK-8237479: 8230305 causes slowdebug build failure
9e62d6
  - JDK-8239559: Cgroups: Incorrect detection logic on some systems
9e62d6
  - JDK-8239785: Cgroups: Incorrect detection logic on old systems in hotspot
9e62d6
  - JDK-8240132: ProblemList com/sun/jdi/InvokeHangTest.java
9e62d6
  - JDK-8240189: [TESTBUG] Some cgroup tests are failing after JDK-8231111
9e62d6
  - JDK-8240335: C2: assert(found_sfpt) failed: no node in loop that's not input to safepoint
9e62d6
  - JDK-8240734: ModuleHashes attribute not reproducible between builds
9e62d6
  - JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese characters were garbled
9e62d6
  - JDK-8241707: introduce randomness k/w to hotspot test suite
9e62d6
  - JDK-8242310: use reproducible random in hotspot compiler tests
9e62d6
  - JDK-8242311: use reproducible random in hotspot runtime tests
9e62d6
  - JDK-8242312: use reproducible random in hotspot gc tests
9e62d6
  - JDK-8242313: use reproducible random in hotspot svc tests
9e62d6
  - JDK-8242538: java/security/SecureRandom/ThreadSafe.java failed on windows
9e62d6
  - JDK-8243429: use reproducible random in :vmTestbase_nsk_stress
9e62d6
  - JDK-8243666: ModuleHashes attribute generated for JMOD and JAR files depends on timestamps
9e62d6
  - JDK-8244500: jtreg test error in test/hotspot/jtreg/containers/docker/TestMemoryAwareness.java
9e62d6
  - JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a test
9e62d6
  - JDK-8245543: Cgroups: Incorrect detection logic on some systems (still reproducible)
9e62d6
  - JDK-8245938: Remove unused print_stack(void) method from XToolkit.c
9e62d6
  - JDK-8246494: introduce vm.flagless at-requires property
9e62d6
  - JDK-8246741: NetworkInterface/UniqueMacAddressesTest: mac address uniqueness test failed
9e62d6
  - JDK-8247589: Implementation of Alpine Linux/x64 Port
9e62d6
  - JDK-8247591: Document Alpine Linux build steps in OpenJDK build guide
9e62d6
  - JDK-8247592: refactor test/jdk/tools/launcher/Test7029048.java
9e62d6
  - JDK-8247614: java/nio/channels/DatagramChannel/Connect.java timed out
9e62d6
  - JDK-8248876: LoadObject with bad base address created for exec file on linux
9e62d6
  - JDK-8249592: Robot.mouseMove moves cursor to incorrect location when display scale varies and Java runs in DPI Unaware mode
9e62d6
  - JDK-8252117: com/sun/jdi/BadHandshakeTest.java failed with "ConnectException: Connection refused: connect"
9e62d6
  - JDK-8252248: __SIGRTMAX is not declared in musl libc
9e62d6
  - JDK-8252250: isnanf is obsolete
9e62d6
  - JDK-8252359: HotSpot Not Identifying it is Running in a Container
9e62d6
  - JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
9e62d6
  - JDK-8253435: Cgroup: 'stomping of _mount_path' crash if manually mounted cpusets exist
9e62d6
  - JDK-8253714: [cgroups v2] Soft memory limit incorrectly using memory.high
9e62d6
  - JDK-8253727: [cgroups v2] Memory and swap limits reported incorrectly
9e62d6
  - JDK-8253797: [cgroups v2] Account for the fact that swap accounting is disabled on some systems
9e62d6
  - JDK-8253872: ArgumentHandler must use the same delimiters as in jvmti_tools.cpp
9e62d6
  - JDK-8253939: [TESTBUG] Increase coverage of the cgroups detection code
9e62d6
  - JDK-8254001: [Metrics] Enhance parsing of cgroup interface files for version detection
9e62d6
  - JDK-8254887: C2: assert(cl->trip_count() > 0) failed: peeling a fully unrolled loop
9e62d6
  - JDK-8254997: Remove unimplemented OSContainer::read_memory_limit_in_bytes
9e62d6
  - JDK-8255266: Update Public Suffix List to 3c213aa
9e62d6
  - JDK-8255604: java/nio/channels/DatagramChannel/Connect.java fails with java.net.BindException: Cannot assign requested address: connect
9e62d6
  - JDK-8255787: Tag container tests that use cGroups with cgroups keyword
9e62d6
  - JDK-8256146: Cleanup test/jdk/java/nio/channels/DatagramChannel/Connect.java
9e62d6
  - JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
9e62d6
  - JDK-8257794: Zero: assert(istate->_stack_limit == istate->_thread->last_Java_sp() + 1) failed: wrong on Linux/x86_32
9e62d6
  - JDK-8258795: Update IANA Language Subtag Registry to Version 2021-05-11
9e62d6
  - JDK-8258956: Memory Leak in StringCoding on ThreadLocal resultCached StringCoding.Result
9e62d6
  - JDK-8259517: Incorrect test path in test cases
9e62d6
  - JDK-8260518: Change default -mmacosx-version-min to 10.12
9e62d6
  - JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0
9e62d6
  - JDK-8262379: Add regression test for JDK-8257746
9e62d6
  - JDK-8263364: sun/net/www/http/KeepAliveStream/KeepAliveStreamCloseWithWrongContentLength.java wedged in getInputStream
9e62d6
  - JDK-8263718: unused-result warning happens at os_linux.cpp
9e62d6
  - JDK-8263856: Github Actions for macos/aarch64 cross-build
9e62d6
  - JDK-8264179: [TESTBUG] Some compiler tests fail when running without C2
9e62d6
  - JDK-8265261: java/nio/file/Files/InterruptCopy.java fails with java.lang.RuntimeException: Copy was not interrupted
9e62d6
  - JDK-8265297: javax/net/ssl/SSLSession/TestEnabledProtocols.java failed with "RuntimeException: java.net.SocketException: Connection reset"
9e62d6
  - JDK-8265343: Update Debian-based cross-compilation recipes
9e62d6
  - JDK-8266251: compiler.inlining.InlineAccessors shouldn't do testing in driver VM
9e62d6
  - JDK-8266318: Switch to macos prefix for macOS bundles
9e62d6
  - JDK-8266391: Replace use of reflection in jdk.internal.platform.Metrics
9e62d6
  - JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8
9e62d6
  - JDK-8268773: Improvements related to: Failed to start thread - pthread_create failed (EAGAIN)
9e62d6
  - JDK-8269772: [macos-aarch64] test compilation failed with "SocketException: No buffer space available"
9e62d6
  - JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo incorrect verification of protocol and cipher support
9e62d6
  - JDK-8270797: ShortECDSA.java test is not complete
9e62d6
  - JDK-8271055: Crash during deoptimization with "assert(bb->is_reachable()) failed: getting result from unreachable basicblock" with -XX:+VerifyStack
9e62d6
  - JDK-8271199: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key
9e62d6
  - JDK-8272167: AbsPathsInImage.java should skip *.dSYM directories
9e62d6
  - JDK-8272358: Some tests may fail when executed with other locales than the US
9e62d6
  - JDK-8272493: Suboptimal code generation around Preconditions.checkIndex intrinsic with AVX2
9e62d6
  - JDK-8272908: Missing coverage for certain classes in com.sun.org.apache.xml.internal.security
9e62d6
  - JDK-8272964: java/nio/file/Files/InterruptCopy.java fails with java.lang.RuntimeException: Copy was not interrupted
9e62d6
  - JDK-8273176: handle latest VS2019 in abstract_vm_version
9e62d6
  - JDK-8273655: content-types.properties files are missing some common types
9e62d6
  - JDK-8274171: java/nio/file/Files/probeContentType/Basic.java failed on "Content type" mismatches
9e62d6
  - JDK-8274233: Minor cleanup for ToolBox
9e62d6
  - JDK-8274735: javax.imageio.IIOException: Unsupported Image Type  while processing a valid JPEG image
9e62d6
  - JDK-8274751: Drag And Drop hangs on Windows
9e62d6
  - JDK-8275082: Update XML Security for Java to 2.3.0
9e62d6
  - JDK-8275330: C2:  assert(n->is_Root() || n->is_Region() || n->is_Phi() || n->is_MachMerge() || def_block->dominates(block)) failed: uses must be dominated by definitions
9e62d6
  - JDK-8275337: C1: assert(false) failed: live_in set of first block must be empty
9e62d6
  - JDK-8276657: XSLT compiler tries to define a class with empty name
9e62d6
  - JDK-8276990: Memory leak in invoker.c fillInvokeRequest() during JDI operations
9e62d6
  - JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
9e62d6
  - JDK-8277093: Vector should throw ClassNotFoundException for a missing class of an element
9e62d6
  - JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java, frame is accessed from main thread
9e62d6
  - JDK-8277422: tools/jar/JarEntryTime.java fails with modified time mismatch
9e62d6
  - JDK-8277922: Unable to click JCheckBox in JTable through Java Access Bridge
9e62d6
  - JDK-8278065: Refactor subclassAudits to use ClassValue
9e62d6
  - JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils.parseIdFromSameDocumentURI throws StringIndexOutOfBoundsException when calling substring method
9e62d6
  - JDK-8278346: java/nio/file/Files/probeContentType/Basic.java fails on Linux SLES15 machine
9e62d6
  - JDK-8278472: Invalid value set to CANDIDATEFORM structure
9e62d6
  - JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
9e62d6
  - JDK-8278851: Correct signer logic for jars signed with multiple digestalgs
9e62d6
  - JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu 21.10
9e62d6
  - JDK-8279219: [REDO] C2 crash when allocating array of size too large
9e62d6
  - JDK-8279356: Method linking fails with guarantee(mh->adapter() != NULL) failed: Adapter blob must already exist!
9e62d6
  - JDK-8279505: Update documentation for RETRY_COUNT and REPEAT_COUNT
9e62d6
  - JDK-8279520: SPNEGO has not passed channel binding info into the underlying mechanism
9e62d6
  - JDK-8279529: ProblemList java/nio/channels/DatagramChannel/ManySourcesAndTargets.java on macosx-aarch64
9e62d6
  - JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java
9e62d6
  - JDK-8279668: x86: AVX2 versions of vpxor should be asserted
9e62d6
  - JDK-8279837: C2: assert(is_Loop()) failed: invalid node class: Region
9e62d6
  - JDK-8279842: HTTPS Channel Binding support for Java GSS/Kerberos
9e62d6
  - JDK-8279958: Provide configure hints for Alpine/apk package managers
9e62d6
  - JDK-8280041: Retry loop issues in java.io.ClassCache
9e62d6
  - JDK-8280373: Update Xalan serializer / SystemIDResolver to align with JDK-8270492
9e62d6
  - JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest clang
9e62d6
  - JDK-8280684: JfrRecorderService failes with guarantee(num_written > 0) when no space left on device.
9e62d6
  - JDK-8280799: С2: assert(false) failed: cyclic dependency prevents range check elimination
9e62d6
  - JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD CPUs
9e62d6
  - JDK-8280964: [Linux aarch64] : drawImage dithers TYPE_BYTE_INDEXED images incorrectly
9e62d6
  - JDK-8281274: deal with ActiveProcessorCount in os::Linux::print_container_info
9e62d6
  - JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as filepath separator in gc paths
9e62d6
  - JDK-8281615: Deadlock caused by jdwp agent
9e62d6
  - JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after JDK-8280799
9e62d6
  - JDK-8282008: Incorrect handling of quoted arguments in ProcessBuilder
9e62d6
  - JDK-8282172: CompileBroker::log_metaspace_failure is called from non-Java/compiler threads
9e62d6
  - JDK-8282225: GHA: Allow one concurrent run per PR only
9e62d6
  - JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv corrupts registers
9e62d6
  - JDK-8282293: Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
9e62d6
  - JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic on x86
9e62d6
  - JDK-8282382: Report glibc malloc tunables in error reports
9e62d6
  - JDK-8282422: JTable.print() failed with UnsupportedCharsetException on AIX ko_KR locale
9e62d6
  - JDK-8282501: Bump update version for OpenJDK: jdk-11.0.16
9e62d6
  - JDK-8282583: Update BCEL md to include the copyright notice
9e62d6
  - JDK-8282588: [11] set harfbuzz compilation flag to -std=c++11
9e62d6
  - JDK-8282589: runtime/ErrorHandling/ErrorHandler.java fails on MacOS aarch64 in jdk 11
9e62d6
  - JDK-8282887: Potential memory leak in sun.util.locale.provider.HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
9e62d6
  - JDK-8283018: 11u GHA: Update GCC 9 minor versions
9e62d6
  - JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in fontpath.c
9e62d6
  - JDK-8283323: libharfbuzz optimization level results in extreme build times
9e62d6
  - JDK-8283350: (tz) Update Timezone Data to 2022a
9e62d6
  - JDK-8283408: Fix a C2 crash when filling arrays with unsafe
9e62d6
  - JDK-8283420: [AOT] Exclude TrackedFlagTest/NotTrackedFlagTest in 11u because of intermittent java.lang.AssertionError: duplicate classes for name Ljava/lang/Boolean;
9e62d6
  - JDK-8283424: compiler/loopopts/LoopUnswitchingBadNodeBudget.java fails with release VMs due to lack of -XX:+UnlockDiagnosticVMOptions
9e62d6
  - JDK-8283451: C2: assert(_base == Long) failed: Not a Long
9e62d6
  - JDK-8283469: Don't use memset to initialize members in FileMapInfo and fix memory leak
9e62d6
  - JDK-8283497: [windows] print TMP and TEMP in hs_err and VM.info
9e62d6
  - JDK-8283614: [11] Repair compiler versions handling after 8233787
9e62d6
  - JDK-8283641: Large value for CompileThresholdScaling causes assert
9e62d6
  - JDK-8283834: Unmappable character for US-ASCII encoding in TestPredicateInputBelowLoopPredicate
9e62d6
  - JDK-8284033: Leak XVisualInfo in getAllConfigs in awt_GraphicsEnv.c
9e62d6
  - JDK-8284094: Memory leak in invoker_completeInvokeRequest()
9e62d6
  - JDK-8284102: [TESTBUG] [11u] Retroactively add regression test for JDK-8272124
9e62d6
  - JDK-8284369: TestFailedAllocationBadGraph fails with -XX:TieredStopAtLevel < 4
9e62d6
  - JDK-8284389: Improve stability of GHA Pre-submit testing by caching cygwin installer
9e62d6
  - JDK-8284458: CodeHeapState::aggregate() leaks blob_name
9e62d6
  - JDK-8284507: GHA: Only check test results if testing was not skipped
9e62d6
  - JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
9e62d6
  - JDK-8284573: [11u] ProblemList TestBubbleUpRef.java and TestGCOldWithCMS.java because of 8272195
9e62d6
  - JDK-8284604: [11u] Update Boot JDK used in GHA to 11.0.14.1
9e62d6
  - JDK-8284620: CodeBuffer may leak _overflow_arena
9e62d6
  - JDK-8284622: Update versions of some Github Actions used in JDK workflow
9e62d6
  - JDK-8284756: [11u] Remove unused isUseContainerSupport in CgroupV1Subsystem
9e62d6
  - JDK-8285395: [JVMCI] [11u] Partial backport of JDK-8220623: InstalledCode
9e62d6
  - JDK-8285397: JNI exception pending in CUPSfuncs.c:250
9e62d6
  - JDK-8285445: cannot open file "NUL:"
9e62d6
  - JDK-8285515: (dc) DatagramChannel.disconnect fails with "Invalid argument" on macOS 12.4
9e62d6
  - JDK-8285523: Improve test java/io/FileOutputStream/OpenNUL.java
9e62d6
  - JDK-8285591: [11] add signum checks in DSA.java engineVerify
9e62d6
  - JDK-8285686: Update FreeType to 2.12.0
9e62d6
  - JDK-8285720: test/jdk/java/nio/file/Files/probeContentType/Basic.java fails to compile after backport of 8273655
9e62d6
  - JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with version from head
9e62d6
  - JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with version from head
9e62d6
  - JDK-8285828: runtime/execstack/TestCheckJDK.java fails with zipped debug symbols
9e62d6
  - JDK-8286013: Incorrect test configurations for compiler/stable/TestStableShort.java
9e62d6
  - JDK-8286198: [linux] Fix process-memory information
9e62d6
  - JDK-8286293: Tests ShortResponseBody and ShortResponseBodyWithRetry should use less resources
9e62d6
  - JDK-8286444: javac errors after JDK-8251329 are not helpful enough to find root cause
9e62d6
  - JDK-8286594: (zipfs) Mention paths with dot elements in ZipException and cleanups
9e62d6
  - JDK-8286630: [11] avoid -std=c++11 CXX harfbuzz buildflag on Windows
9e62d6
  - JDK-8286855: javac error on invalid jar should only print filename
9e62d6
  - JDK-8287109: Distrust.java failed with CertificateExpiredException
9e62d6
  - JDK-8287119: Add Distrust.java to ProblemList
9e62d6
  - JDK-8287362: FieldAccessWatch testcase failed on AIX platform
9e62d6
  - JDK-8287378: GHA: Update cygwin to fix issues in langtools tests on Windows
9e62d6
  - JDK-8287739: [11u] ProblemList sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java
9e62d6
9e62d6
Notes on individual issues:
9e62d6
===========================
9e62d6
9e62d6
core-libs/java.io:serialization:
9e62d6
9e62d6
JDK-8277157: Vector should throw ClassNotFoundException for a missing class of an element
9e62d6
=========================================================================================
9e62d6
`java.util.Vector` is updated to correctly report
9e62d6
`ClassNotFoundException that occurs during deserialization using
9e62d6
`java.io.ObjectInputStream.GetField.get(name, object)` when the class
9e62d6
of an element of the Vector is not found. Without this fix, a
9e62d6
`StreamCorruptedException` is thrown that does not provide information
9e62d6
about the missing class.
9e62d6
9e62d6
core-libs/java.net:
9e62d6
9e62d6
JDK-8285240: HTTPS Channel Binding support for Java GSS/Kerberos
9e62d6
================================================================
9e62d6
Support has been added for TLS channel binding tokens for
9e62d6
Negotiate/Kerberos authentication over HTTPS through
9e62d6
javax.net.HttpsURLConnection.
9e62d6
9e62d6
Channel binding tokens are increasingly required as an enhanced form
9e62d6
of security which can mitigate certain kinds of socially engineered,
9e62d6
man in the middle (MITM) attacks. They work by communicating from a
9e62d6
client to a server the client's understanding of the binding between
9e62d6
connection security (as represented by a TLS server cert) and higher
9e62d6
level authentication credentials (such as a username and
9e62d6
password). The server can then detect if the client has been fooled by
9e62d6
a MITM and shutdown the session/connection.
9e62d6
9e62d6
The feature is controlled through a new system property
9e62d6
`jdk.https.negotiate.cbt` which is described fully at the following
9e62d6
page:
9e62d6
9e62d6
https://docs.oracle.com/en/java/javase/19/docs/api/java.base/java/net/doc-files/net-properties.html#jdk.https.negotiate.cbt
9e62d6
9e62d6
core-libs/java.lang:
9e62d6
9e62d6
JDK-8283137: Incorrect handling of quoted arguments in ProcessBuilder
9e62d6
=====================================================================
9e62d6
ProcessBuilder on Windows is restored to address a regression caused
9e62d6
by JDK-8250568.  Previously, an argument to ProcessBuilder that
9e62d6
started with a double-quote and ended with a backslash followed by a
9e62d6
double-quote was passed to a command incorrectly and may cause the
9e62d6
command to fail.  For example the argument `"C:\\Program Files\"`,
9e62d6
would be seen by the command with extra double-quotes. This update
9e62d6
restores the long standing behavior that does not treat the backslash
9e62d6
before the final double-quote specially.
9e62d6
9e62d6
core-libs/java.util.jar:
9e62d6
9e62d6
JDK-8278386: Default JDK compressor will be closed when IOException is encountered
9e62d6
==================================================================================
9e62d6
`DeflaterOutputStream.close()` and `GZIPOutputStream.finish()` methods
9e62d6
have been modified to close out the associated default JDK compressor
9e62d6
before propagating a Throwable up the
9e62d6
stack. `ZIPOutputStream.closeEntry()` method has been modified to
9e62d6
close out the associated default JDK compressor before propagating an
9e62d6
IOException, not of type ZipException, up the stack.
9e62d6
9e62d6
core-libs/java.io:
9e62d6
9e62d6
JDK-8285660: New System Property to Disable Windows Alternate Data Stream Support in java.io.File
9e62d6
=================================================================================================
9e62d6
The Windows implementation of `java.io.File` allows access to NTFS
9e62d6
Alternate Data Streams (ADS) by default. Such streams have a structure
9e62d6
like “filename:streamname”. A system property `jdk.io.File.enableADS`
9e62d6
has been added to control this behavior. To disable ADS support in
9e62d6
`java.io.File`, the system property `jdk.io.File.enableADS` should be
9e62d6
set to `false` (case ignored). Stricter path checking however prevents
9e62d6
the use of special devices such as `NUL:`
9e62d6
9e62d6
New in release OpenJDK 11.0.15 (2022-04-19):
9e62d6
=============================================
9e62d6
Live versions of these release notes can be found at:
9e62d6
  * https://bitly.com/openjdk11015
9e62d6
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.15.txt
9e62d6
9e62d6
* New features
9e62d6
  - JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
9e62d6
* Security fixes
9e62d6
  - JDK-8269938: Enhance XML processing passes redux
9e62d6
  - JDK-8270504, CVE-2022-21426: Better XPath expression handling
9e62d6
  - JDK-8272255: Completely handle MIDI files
9e62d6
  - JDK-8272261: Improve JFR recording file processing
9e62d6
  - JDK-8272594: Better record of recordings
9e62d6
  - JDK-8274221: More definite BER encodings
9e62d6
  - JDK-8275082, JDK-8278008, CVE-2022-21476: Update XML Security for Java to 2.3.0
9e62d6
  - JDK-8275151, CVE-2022-21443: Improved Object Identification
9e62d6
  - JDK-8277227: Better identification of OIDs
9e62d6
  - JDK-8277672, CVE-2022-21434: Better invocation handler handling
9e62d6
  - JDK-8278356: Improve file creation
9e62d6
  - JDK-8278449: Improve keychain support
9e62d6
  - JDK-8278798: Improve supported intrinsic
9e62d6
  - JDK-8278805: Enhance BMP image loading
9e62d6
  - JDK-8278972, CVE-2022-21496: Improve URL supports
9e62d6
  - JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
9e62d6
* Other changes
9e62d6
  - JDK-8065704: Set LC_ALL=C for all relevant commands in the build system
9e62d6
  - JDK-8177814: jdk/editpad is not in jdk TEST.groups
9e62d6
  - JDK-8186780: clang fastdebug assertion failure in os_linux_x86:os::verify_stack_alignment()
9e62d6
  - JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java and NonGregorianFormatTest fail intermittently
9e62d6
  - JDK-8193277: SimpleFileObject inconsistency between getName and getShortName
9e62d6
  - JDK-8199079: Test javax/swing/UIDefaults/6302464/bug6302464.java is unstable
9e62d6
  - JDK-8202142: jfr/event/io/TestInstrumentation is unstable
9e62d6
  - JDK-8207011: Remove uses of the register storage class specifier
9e62d6
  - JDK-8207793: [TESTBUG] runtime/Metaspace/FragmentMetaspace.java fails: heap needs to be increased
9e62d6
  - JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/StressRedefineWithoutBytecodeCorruption/TestDescription.java failed with NullPointerException
9e62d6
  - JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing initializer for member _jvmtiHeapCallbacks::heap_reference_callback
9e62d6
  - JDK-8210236: Prepare ciReceiverTypeData::translate_receiver_data_from for concurrent class unloading
9e62d6
  - JDK-8211170: AArch64: Warnings in C1 and template interpreter
9e62d6
  - JDK-8211333: AArch64: Fix another build failure after JDK-8211029
9e62d6
  - JDK-8214004: Missing space between compiler thread name and task info in hs_err
9e62d6
  - JDK-8214026: Canonicalized archive paths appearing in diagnostics
9e62d6
  - JDK-8214761: Bug in parallel Kahan summation implementation
9e62d6
  - JDK-8216969: ParseException thrown for certain months with russian locale
9e62d6
  - JDK-8218546: Unable to connect to https://google.com using java.net.HttpClient
9e62d6
  - JDK-8220634: SymLinkArchiveTest should handle not being able to create symlinks
9e62d6
  - JDK-8222825: ARM32 SIGILL issue on single core CPU (not supported PLDW instruction)
9e62d6
  - JDK-8223142: Clean-up WS and CB.
9e62d6
  - JDK-8225559: assertion error at TransTypes.visitApply
9e62d6
  - JDK-8232533: G1 uses only a single thread for pretouching the java heap
9e62d6
  - JDK-8233827: Enable screenshots in the enhanced failure handler on Linux/macOS
9e62d6
  - JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/8001470/bug8001470.java for windows-x64
9e62d6
  - JDK-8234930: Use MAP_JIT when allocating pages for code cache on macOS
9e62d6
  - JDK-8236210: javac generates wrong annotation for fields generated from record components
9e62d6
  - JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
9e62d6
  - JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo* from shell to java
9e62d6
  - JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
9e62d6
  - JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/6318524/bug6318524.java never fails
9e62d6
  - JDK-8240904: Screen flashes on test failures when running tests from make
9e62d6
  - JDK-8241004: NMT tests fail on unaligned thread size with debug build
9e62d6
  - JDK-8241423: NUMA APIs fail to work in dockers due to dependent syscalls are disabled by default
9e62d6
  - JDK-8247272: SA ELF file support has never worked for 64-bit causing address to symbol name mapping to fail
9e62d6
  - JDK-8247515: OSX pc_to_symbol() lookup does not work with core files
9e62d6
  - JDK-8249019: clean up FileInstaller $test.src $cwd in vmTestbase_vm_compiler tests
9e62d6
  - JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup fails with some symbols
9e62d6
  - JDK-8251126: nsk.share.GoldChecker should read golden file from ${test.src}
9e62d6
  - JDK-8251127: clean up FileInstaller $test.src $cwd in remaining vmTestbase_vm_compiler tests
9e62d6
  - JDK-8251132: make main classes public in vmTestbase/jit tests
9e62d6
  - JDK-8251558: J2DBench should support shaped and translucent windows
9e62d6
  - JDK-8251998: remove usage of PropertyResolvingWrapper in vmTestbase/jit/t
9e62d6
  - JDK-8252005: narrow disabling of allowSmartActionArgs in vmTestbase
9e62d6
  - JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/TestDescription.java fails with "ERROR: DebuggeeSleepingThread: ThreadDeath lost"
9e62d6
  - JDK-8253816: Support macOS W^X
9e62d6
  - JDK-8253817: Support macOS Aarch64 ABI in Interpreter
9e62d6
  - JDK-8253818: Support macOS Aarch64 ABI for compiled wrappers
9e62d6
  - JDK-8253819: Implement os/cpu for macOS/AArch64
9e62d6
  - JDK-8253839: Update tests and JDK code for macOS/Aarch64
9e62d6
  - JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors on Windows+ARM64 build
9e62d6
  - JDK-8254085: javax/swing/text/Caret/TestCaretPositionJTextPane.java failed with "RuntimeException:  Wrong caret position"
9e62d6
  - JDK-8254827: JVMCI: Enable it for Windows+AArch64
9e62d6
  - JDK-8254940: AArch64: Cleanup non-product thread members
9e62d6
  - JDK-8254941: Implement Serviceability Agent for macOS/AArch64
9e62d6
  - JDK-8255035: Update BCEL to Version 6.5.0
9e62d6
  - JDK-8255239: The timezone of the hs_err_pid log file is corrupted in Japanese locale
9e62d6
  - JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11 provider
9e62d6
  - JDK-8255776: Change build system for macOS/AArch64
9e62d6
  - JDK-8256154: Some TestNG tests require default constructors
9e62d6
  - JDK-8256321: Some "inactive" color profiles use the wrong profile class
9e62d6
  - JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not work in a minimized state
9e62d6
  - JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported at sigset() in exesigtest.c
9e62d6
  - JDK-8257769: Cipher.getParameters() throws NPE for ChaCha20-Poly1305
9e62d6
  - JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails in GTK L&F
9e62d6
  - JDK-8261107: ArrayIndexOutOfBoundsException in the ICC_Profile.getInstance(InputStream)
9e62d6
  - JDK-8261205: AssertionError: Cannot add metadata to an intersection type
9e62d6
  - JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed with "guarantee(false) failed: wrong number of expression stack elements during deopt"
9e62d6
  - JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
9e62d6
  - JDK-8262896: [macos_aarch64] Crash in jni_fast_GetLongField
9e62d6
  - JDK-8262903: [macos_aarch64] Thread::current() called on detached thread
9e62d6
  - JDK-8263185: Mallinfo deprecated in glibc 2.33
9e62d6
  - JDK-8264650: Cross-compilation to macos/aarch64
9e62d6
  - JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
9e62d6
  - JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
9e62d6
  - JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
9e62d6
  - JDK-8266171: -Warray-bounds happens in imageioJPEG.c
9e62d6
  - JDK-8266172: -Wstringop-overflow happens in vmError.cpp
9e62d6
  - JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
9e62d6
  - JDK-8266174: -Wmisleading-indentation happens in libmlib_image sources
9e62d6
  - JDK-8266176: -Wmaybe-uninitialized happens in libArrayIndexOutOfBoundsExceptionTest.c
9e62d6
  - JDK-8266187: Memory leak in appendBootClassPath()
9e62d6
  - JDK-8266421: Deadlock in Sound System
9e62d6
  - JDK-8266889: [macosx-aarch64] Crash with SIGBUS in MarkActivationClosure::do_code_blob during vmTestbase/nsk/jvmti/.../bi04t002 test run
9e62d6
  - JDK-8268014: Build failure on SUSE Linux Enterprise Server 11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
9e62d6
  - JDK-8268542: serviceability/logging/TestFullNames.java tests only 1st test case
9e62d6
  - JDK-8268882: C2: assert(n->outcnt() != 0 || C->top() == n || n->is_Proj()) failed: No dead instructions after post-alloc
9e62d6
  - JDK-8270874: JFrame paint artifacts when dragged from standard monitor to HiDPI monitor
9e62d6
  - JDK-8271202: C1: assert(false) failed: live_in set of first block must be empty
9e62d6
  - JDK-8272345: macos doesn't check `os::set_boot_path()` result
9e62d6
  - JDK-8272473: Parsing epoch seconds at a DST transition with a non-UTC parser is wrong
9e62d6
  - JDK-8272541: Incorrect overflow test in Toom-Cook branch of BigInteger multiplication
9e62d6
  - JDK-8273277: C2: Move conditional negation into rc_predicate
9e62d6
  - JDK-8273341: Update Siphash to version 1.0
9e62d6
  - JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/bug6302464.java fails on macOS12
9e62d6
  - JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict tests
9e62d6
  - JDK-8273438: Enable parallelism in vmTestbase/metaspace/stressHierarchy tests
9e62d6
  - JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java failure
9e62d6
  - JDK-8273575: memory leak in appendBootClassPath(), paths must be deallocated
9e62d6
  - JDK-8273634: [TEST_BUG] Improve javax/swing/text/ParagraphView/6364882/bug6364882.java
9e62d6
  - JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails in GTK L&F
9e62d6
  - JDK-8273682: Upgrade Jline to 3.20.0
9e62d6
  - JDK-8273704: DrawStringWithInfiniteXform.java failed : drawString with InfiniteXform transform takes long time
9e62d6
  - JDK-8273933: [TESTBUG] Test must run without preallocated exceptions
9e62d6
  - JDK-8274265: Suspicious string concatenation in logTestUtils.inline.hpp
9e62d6
  - JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed "assert(m != __null) failed: NULL mirror"
9e62d6
  - JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/bug6364882.java failures
9e62d6
  - JDK-8274523: java/lang/management/MemoryMXBean/MemoryTest.java test should handle Shenandoah
9e62d6
  - JDK-8274524: SSLSocket.close() hangs if it is called during the ssl handshake
9e62d6
  - JDK-8274658: ISO 4217 Amendment 170 Update
9e62d6
  - JDK-8274714: Incorrect verifier protected access error message
9e62d6
  - JDK-8274736: Concurrent read/close of SSLSockets causes SSLSessions to be invalidated unnecessarily
9e62d6
  - JDK-8274795: AArch64: avoid spilling and restoring r18 in macro assembler
9e62d6
  - JDK-8275326: C2: assert(no_dead_loop) failed: dead loop detected
9e62d6
  - JDK-8275536: Add test to check that File::lastModified returns same time stamp as Files.getLastModifiedTime
9e62d6
  - JDK-8275610: C2: Object field load floats above its null check resulting in a segfault
9e62d6
  - JDK-8275650: Problemlist java/io/File/createTempFile/SpecialTempFile.java for Windows 11
9e62d6
  - JDK-8275703: System.loadLibrary fails on Big Sur for libraries hidden from filesystem
9e62d6
  - JDK-8275811: Incorrect instance to dispose
9e62d6
  - JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle rounding correctly
9e62d6
  - JDK-8276141: XPathFactory set/getProperty method
9e62d6
  - JDK-8276177: nsk/jvmti/RedefineClasses/StressRedefineWithoutBytecodeCorruption failed with "assert(def_ik->is_being_redefined()) failed: should be being redefined to get here"
9e62d6
  - JDK-8276314: [JVMCI] check alignment of call displacement during code installation
9e62d6
  - JDK-8276623: JDK-8275650 accidentally pushed "out" file
9e62d6
  - JDK-8277328: jdk/jshell/CommandCompletionTest.java failures on Windows
9e62d6
  - JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java fails with SIGSEGV in InstanceKlass::jni_id_for
9e62d6
  - JDK-8277385: Zero: Enable CompactStrings support
9e62d6
  - JDK-8277441: CompileQueue::add fails with assert(_last->next() == __null) failed: not last
9e62d6
  - JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend fun with loop
9e62d6
  - JDK-8277488: Add expiry exception for Digicert (geotrustglobalca) expiring in May 2022
9e62d6
  - JDK-8277795: ldap connection timeout not honoured under contention
9e62d6
  - JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
9e62d6
  - JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
9e62d6
  - JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java has duplicate -Xmx
9e62d6
  - JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has duplicate -Xmx
9e62d6
  - JDK-8278172: java/nio/channels/FileChannel/BlockDeviceSize.java should only run on Linux
9e62d6
  - JDK-8278309: [windows] use of uninitialized OSThread::_state
9e62d6
  - JDK-8278381: [GCC 11] Address::make_raw() does not initialize rspec
9e62d6
  - JDK-8278384: Bytecodes::result_type() for arraylength returns T_VOID instead of T_INT
9e62d6
  - JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java fails with release VMs after JDK-8262134
9e62d6
  - JDK-8278871: [JVMCI] assert((uint)reason < 2* _trap_hist_limit) failed: oob
9e62d6
  - JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
9e62d6
  - JDK-8279077: JFR crashes on Linux ppc due to missing crash protector in signal handler
9e62d6
  - JDK-8279225: [arm32] C1 longs comparison operation destroys argument registers
9e62d6
  - JDK-8279300: [arm32] SIGILL when running GetObjectSizeIntrinsicsTest
9e62d6
  - JDK-8279379: GHA: Print tests that are in error
9e62d6
  - JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses wrong condition
9e62d6
  - JDK-8279702: [macosx] ignore xcodebuild warnings on M1
9e62d6
  - JDK-8279833: Loop optimization issue in String.encodeUTF8_UTF16
9e62d6
  - JDK-8279924: [PPC64, s390] implement frame::is_interpreted_frame_valid checks
9e62d6
  - JDK-8279998: PPC64 debug builds fail with "untested: RangeCheckStub: predicate_failed_trap_id"
9e62d6
  - JDK-8280155: [PPC64, s390] frame size checks are not yet correct
9e62d6
  - JDK-8280414: Memory leak in DefaultProxySelector
9e62d6
  - JDK-8280526: x86_32 Math.sqrt performance regression with -XX:UseSSE={0,1}
9e62d6
  - JDK-8280786: Build failure on Solaris after 8262392
9e62d6
  - JDK-8280999: array_bounds should be array-bounds after 8278507
9e62d6
  - JDK-8281061: [s390] JFR runs into assertions while validating interpreter frames
9e62d6
  - JDK-8281520: JFR: A wrong parameter is passed to the constructor of LeakKlassWriter
9e62d6
  - JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is redundant since JDK-8268801
9e62d6
  - JDK-8282300: Throws NamingException instead of InvalidNameException after JDK-8278972
9e62d6
  - JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using Xcode 13.1: call to 'log2_intptr' is ambiguous
9e62d6
  - JDK-8282397: createTempFile method of java.io.File is failing when called with suffix of spaces character
9e62d6
  - JDK-8282761: XPathFactoryImpl remove setProperty and getProperty methods
9e62d6
  - JDK-8283018: 11u GHA: Update GCC 9 minor versions
9e62d6
  - JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport of JDK-8253795
9e62d6
  - JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
9e62d6
  - JDK-8284548: Invalid XPath expression causes StringIndexOutOfBoundsException
9e62d6
  - JDK-8284920: Incorrect Token type causes XPath expression to return empty result
9e62d6
9e62d6
Notes on individual issues:
9e62d6
===========================
9e62d6
9e62d6
security-libs/javax.crypto:pkcs11:
9e62d6
9e62d6
JDK-8275737: SunPKCS11 Provider Supports ChaCha20-Poly1305 Cipher and ChaCha20 KeyGenerator if Supported by PKCS11 Library
9e62d6
==========================================================================================================================
9e62d6
SunPKCS11 provider is enhanced to support the following crypto
9e62d6
services and algorithms when the underlying PKCS11 library supports
9e62d6
the corresponding PKCS#11 mechanisms:
9e62d6
9e62d6
* ChaCha20 KeyGenerator <=> CKM_CHACHA20_KEY_GEN mechanism
9e62d6
* ChaCha20-Poly1305 Cipher <=> CKM_CHACHA20_POLY1305 mechanism
9e62d6
* ChaCha20-Poly1305 AlgorithmParameters <=> CKM_CHACHA20_POLY1305 mechanism
9e62d6
* ChaCha20 SecretKeyFactory <=> CKM_CHACHA20_POLY1305 mechanism
9e62d6
95617d
New in release OpenJDK 11.0.14.1 (2022-02-08):
95617d
=============================================
95617d
Live versions of these release notes can be found at:
95617d
  * https://bitly.com/openjdk110141
95617d
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.14.1.txt
95617d
95617d
* Other changes
95617d
  - JDK-8218546: Unable to connect to https://google.com using java.net.HttpClient
95617d
  - JDK-8280786: Build failure on Solaris after 8262392
95617d
  - JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1
95617d
95617d
New in release OpenJDK 11.0.14 (2022-01-18):
95617d
=============================================
95617d
Live versions of these release notes can be found at:
95617d
  * https://bitly.com/openjdk11014
95617d
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.14.txt
95617d
95617d
* New features
95617d
  - JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
95617d
* Security fixes
95617d
  - JDK-8217375: jarsigner breaks old signature with long lines in manifest
95617d
  - JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named "." inside
95617d
  - JDK-8264934, CVE-2022-21248: Enhance cross VM serialization
95617d
  - JDK-8268488: More valuable DerValues
95617d
  - JDK-8268494: Better inlining of inlined interfaces
95617d
  - JDK-8268512: More content for ContentInfo
95617d
  - JDK-8268795: Enhance digests of Jar files
95617d
  - JDK-8268801: Improve PKCS attribute handling
95617d
  - JDK-8268813, CVE-2022-21283: Better String matching
95617d
  - JDK-8269151: Better construction of EncryptedPrivateKeyInfo
95617d
  - JDK-8269944: Better HTTP transport redux
95617d
  - JDK-8270386, CVE-2022-21291: Better verification of scan methods
95617d
  - JDK-8270392, CVE-2022-21293: Improve String constructions
95617d
  - JDK-8270416, CVE-2022-21294: Enhance construction of Identity maps
95617d
  - JDK-8270492, CVE-2022-21282: Better resolution of URIs
95617d
  - JDK-8270498, CVE-2022-21296: Improve SAX Parser configuration management
95617d
  - JDK-8270646, CVE-2022-21299: Improved scanning of XML entities
95617d
  - JDK-8270952, CVE-2022-21277: Improve TIFF file handling
95617d
  - JDK-8271962: Better TrueType font loading
95617d
  - JDK-8271968: Better canonical naming
95617d
  - JDK-8271987: Manifest improved manifest entries
95617d
  - JDK-8272014, CVE-2022-21305: Better array indexing
95617d
  - JDK-8272026, CVE-2022-21340: Verify Jar Verification
95617d
  - JDK-8272236, CVE-2022-21341: Improve serial forms for transport
95617d
  - JDK-8272272: Enhance jcmd communication
95617d
  - JDK-8272462: Enhance image handling
95617d
  - JDK-8273290: Enhance sound handling
95617d
  - JDK-8273756, CVE-2022-21360: Enhance BMP image support
95617d
  - JDK-8273838, CVE-2022-21365: Enhanced BMP processing
95617d
  - JDK-8274096, CVE-2022-21366: Improve decoding of image files
95617d
  - JDK-8279541: Improve HarfBuzz
95617d
* Other changes
95617d
  - JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/ChoiceKeyEventReaction.html fails
95617d
  - JDK-7105119: [TEST_BUG] [macosx] In test UIDefaults.toString() must be called with the invokeLater()
95617d
  - JDK-7151826: [TEST_BUG] [macosx] The test javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
95617d
  - JDK-7179006: [macosx] Print-to-file doesn't work: printing to the default printer instead
95617d
  - JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/bug4726194.java fails on MacOSX
95617d
  - JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003  Wrong number of thread end events
95617d
  - JDK-8039261: [TEST_BUG]: There is not a minimal security level in Java Preferences and the TestApplet.html is blocked.
95617d
  - JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/AltTabCrashTest.java fails with exception
95617d
  - JDK-8075909: [TEST_BUG] The regression-swing case failed as it does not have the 'Open' button when select 'subdir' folder with NimbusLAF
95617d
  - JDK-8078219: Verify lack of @test tag in files in java/net test directory
95617d
  - JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails with "RuntimeException: Process terminated prematurely"
95617d
  - JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/ThreadMXBeanStateTest.java timed out intermittently
95617d
  - JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails intermittently
95617d
  - JDK-8131745: java/lang/management/ThreadMXBean/AllThreadIds.java still fails intermittently
95617d
  - JDK-8136517: [macosx]Test  java/awt/Focus/8073453/AWTFocusTransitionTest.java fails on MacOSX
95617d
  - JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/4251579/bug4251579.java failure due to timing
95617d
  - JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/Test6541987.java fails
95617d
  - JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/bug4760494.java leaves key pressed
95617d
  - JDK-8159904: [TEST_BUG] Failure on solaris of java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
95617d
  - JDK-8163086: java/awt/Window/TranslucentJAppletTest/TranslucentJAppletTest.java fails
95617d
  - JDK-8165828: [TEST_BUG] The reg case:javax/swing/plaf/metal/MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look and Feel
95617d
  - JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not fired! on Windows
95617d
  - JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException: Default button is not pressed
95617d
  - JDK-8169959: javax/swing/JTable/6263446/bug6263446.java: Table should be editing
95617d
  - JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/7156657/bug7156657.java fails on OS X
95617d
  - JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails on Windows
95617d
  - JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java fails intermittently
95617d
  - JDK-8179880: Refactor javax/security shell tests to plain java tests
95617d
  - JDK-8180568: Refactor javax/crypto shell tests to plain java tests
95617d
  - JDK-8180569: Refactor sun/security/krb5/ shell tests to plain java tests
95617d
  - JDK-8180571: Refactor sun/security/pkcs11 shell tests to plain java tests and fix failures
95617d
  - JDK-8180573: Refactor sun/security/tools shell tests to plain java tests
95617d
  - JDK-8187649: ArrayIndexOutOfBoundsException in java.util.JapaneseImperialCalendar
95617d
  - JDK-8190753: (zipfs): Accessing a large entry (> 2^31 bytes) leads to a negative initial size for ByteArrayOutputStream
95617d
  - JDK-8195703: BasicJDWPConnectionTest.java: 'App exited unexpectedly with 2'
95617d
  - JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java fails
95617d
  - JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java fails
95617d
  - JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/NoEventsTest.java fails on Windows
95617d
  - JDK-8197811: Test java/awt/Choice/PopupPosTest/PopupPosTest.java fails on Windows
95617d
  - JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java fails on mac
95617d
  - JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java fails on mac
95617d
  - JDK-8198619: java/awt/Focus/FocusTraversalPolicy/ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java fails on mac
95617d
  - JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java fails on mac
95617d
  - JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/SubMenuShowTest/SubMenuShowTest.html fails on mac
95617d
  - JDK-8199138: Add RISC-V support to Zero
95617d
  - JDK-8199529: javax/swing/text/Utilities/8142966/SwingFontMetricsTest.java fails on windows
95617d
  - JDK-8201224: Make string buffer size dynamic in mlvmJvmtiUtils.c
95617d
  - JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/FollowReferences/followref003/TestDescription.java fails with "Location mismatch" errors
95617d
  - JDK-8204161: [TESTBUG] auto failed with the "Applet thread threw exception: java.lang.UnsupportedOperationException" exception
95617d
  - JDK-8206085: Refactor langtools/tools/javac/versions/Versions.java
95617d
  - JDK-8207936: TestZipFile failed with java.lang.AssertionError exception
95617d
  - JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
95617d
  - JDK-8209611: use C++ compiler for hotspot tests
95617d
  - JDK-8210182: Remove macros for C compilation from vmTestBase but non jvmti
95617d
  - JDK-8210198: Clean up JNI_ENV_ARG for vmTestbase/jvmti/Get[A-F] tests
95617d
  - JDK-8210205: build fails on AIX in hotspot cpp tests (for example getstacktr001.cpp)
95617d
  - JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION on windows-x86
95617d
  - JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java back to tier1
95617d
  - JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[A-N] tests
95617d
  - JDK-8210392: assert(Compile::current()->live_nodes() < Compile::current()->max_node_limit()) failed: Live Node limit exceeded limit
95617d
  - JDK-8210395: Add doc to SecurityTools.java
95617d
  - JDK-8210429: Clean up JNI_ENV_ARG for vmTestbase/jvmti/Get[G-Z] tests
95617d
  - JDK-8210481: Remove #ifdef cplusplus from vmTestbase
95617d
  - JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[N-R] tests
95617d
  - JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[R-U] tests
95617d
  - JDK-8210689: Remove the multi-line old C style for string literals
95617d
  - JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti/unit tests
95617d
  - JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
95617d
  - JDK-8210920: Native C++ tests are not using CXXFLAGS
95617d
  - JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR: hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti, thread)"
95617d
  - JDK-8211036: Remove the NSK_STUB macros from vmTestbase for non jvmti
95617d
  - JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[G-I]*
95617d
  - JDK-8211148: var in implicit lambdas shouldn't be accepted for source < 11
95617d
  - JDK-8211171: move JarUtils to top-level testlibrary
95617d
  - JDK-8211227: Inconsistent TLS protocol version in debug output
95617d
  - JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[A-G]*
95617d
  - JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
95617d
  - JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[I-S]*
95617d
  - JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/scenarios/[A-E]
95617d
  - JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/scenarios/[E-M]
95617d
  - JDK-8211905: Remove multiple casts for EM06 file
95617d
  - JDK-8211999: Window positioning bugs due to overlapping GraphicsDevice bounds (Windows/HiDPI)
95617d
  - JDK-8212082: Remove the NSK_CPP_STUB macros for remaining vmTestbase/jvmti/[sS]*
95617d
  - JDK-8212083: Handle remaining gc/lock native code and fix two strings
95617d
  - JDK-8212148: Remove remaining NSK_CPP_STUBs
95617d
  - JDK-8213110: Remove the use of applets in automatic tests
95617d
  - JDK-8213189: Make restricted headers in HTTP Client configurable and remove Date by default
95617d
  - JDK-8213263: fix legal headers in test/langtools
95617d
  - JDK-8213296: Fix legal headers in test/jdk/java/net
95617d
  - JDK-8213301: Fix legal headers in jdk logging tests
95617d
  - JDK-8213305: Fix legal headers in test/java/math
95617d
  - JDK-8213306: Fix legal headers in test/java/nio
95617d
  - JDK-8213328: Update test copyrights in test/java/util/zip and test/jdk/tools
95617d
  - JDK-8213330: Fix legal headers in i18n tests
95617d
  - JDK-8213707: [TEST] vmTestbase/nsk/stress/except/except011.java failed due to wrong class name
95617d
  - JDK-8214469: [macos] PIT: java/awt/Choice/ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
95617d
  - JDK-8215410: Regression test for JDK-8214994
95617d
  - JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
95617d
  - JDK-8215624: Add parallel heap iteration for jmap –histo
95617d
  - JDK-8215889: assert(!_unloading) failed: This oop is not available to unloading class loader data with ZGC
95617d
  - JDK-8216318: The usage of Disposer in the java.awt.Robot can be deleted
95617d
  - JDK-8216417: cleanup of IPv6 scope-id handling
95617d
  - JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java failed with UnsupportedOperation exception
95617d
  - JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
95617d
  - JDK-8217633: Configurable extensions with system properties
95617d
  - JDK-8217882: java/net/httpclient/MaxStreams.java failed once
95617d
  - JDK-8217903: java/net/httpclient/Response204.java fails with 404
95617d
  - JDK-8218483: Crash in "assert(_daemon_threads_count->get_value() > daemon_count) failed: thread count mismatch 5 : 5"
95617d
  - JDK-8219986: Change to Xcode 10.1 for building on Macosx at Oracle
95617d
  - JDK-8220575: Correctly format test URI's that contain a retrieved IPv6 address
95617d
  - JDK-8221259: New tests for java.net.Socket to exercise long standing behavior
95617d
  - JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails on MacOS + Solaris
95617d
  - JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/FocusTraversal.java fails on ubuntu
95617d
  - JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/IconifyTest.java fails on ubuntu18.04
95617d
  - JDK-8222446: assert(C->env()->system_dictionary_modification_counter_changed()) failed: Must invalidate if TypeFuncs differ
95617d
  - JDK-8223137: Rename predicate 'do_unroll_only()' to 'is_unroll_only()'.
95617d
  - JDK-8223138: Small clean-up in loop-tree support.
95617d
  - JDK-8223139: Rename mandatory policy-do routines.
95617d
  - JDK-8223140: Clean-up in 'ok_to_convert()'
95617d
  - JDK-8223141: Change (count) suffix _ct into _cnt.
95617d
  - JDK-8223400: Replace some enums with static const members in hotspot/runtime
95617d
  - JDK-8223658: Performance regression of XML.validation in 13-b19
95617d
  - JDK-8223923: C2: Missing interference with mismatched unsafe accesses
95617d
  - JDK-8224829: AsyncSSLSocketClose.java has timing issue
95617d
  - JDK-8225083: Remove Google certificate that is expiring in December 2021
95617d
  - JDK-8226514: Replace wildcard address with loopback or local host in tests - part 17
95617d
  - JDK-8226943: compile error in libfollowref003.cpp  with XCode 10.2 on macosx
95617d
  - JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed due to "SSLException: An established connection was aborted by the software in your host machine"
95617d
  - JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java fails on Windows7
95617d
  - JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently positions text
95617d
  - JDK-8230019: [REDO] compiler/types/correctness/* tests fail with "assert(recv == __null || recv->is_klass()) failed: wrong type"
95617d
  - JDK-8230067: Add optional automatic retry when running jtreg tests
95617d
  - JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests may fail on some platforms
95617d
  - JDK-8231501: VM crash in MethodData::clean_extra_data(CleanExtraDataClosure*):  fatal error: unexpected tag 99
95617d
  - JDK-8233403: Improve verbosity of some httpclient tests
95617d
  - JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
95617d
  - JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on MacOS
95617d
  - JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on MacOS
95617d
  - JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
95617d
  - JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
95617d
  - JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on macos
95617d
  - JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is failing on macos
95617d
  - JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails on macos
95617d
  - JDK-8233562: [TESTBUG] Swing StyledEditorKit test bug4506788.java fails on MacOS
95617d
  - JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
95617d
  - JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on MacoS
95617d
  - JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
95617d
  - JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java fails on macos
95617d
  - JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is failing on macos
95617d
  - JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails on macos
95617d
  - JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java fails on macos
95617d
  - JDK-8233637: [TESTBUG] Swing ActionListenerCalledTwiceTest.java fails on macos
95617d
  - JDK-8233638: [TESTBUG] Swing test ScreenMenuBarInputTwice.java fails on macos
95617d
  - JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails on macos
95617d
  - JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails on macos
95617d
  - JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on macos
95617d
  - JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is failing on macos
95617d
  - JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is failing on macos
95617d
  - JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture Recognition in all the platforms
95617d
  - JDK-8234823: java/net/Socket/Timeouts.java testcase testTimedConnect2() fails on Windows 10
95617d
  - JDK-8235784: java/lang/invoke/VarHandles/VarHandleTestByteArrayAsInt.java fails due to timeout with fastdebug bits
95617d
  - JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java fails with -Xcomp -XX:TieredStopAtLevel=1
95617d
  - JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60), cond_wait
95617d
  - JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT, when using proxy tunnel
95617d
  - JDK-8237354: Add option to jcmd to write a gzipped heap dump
95617d
  - JDK-8237589: Fix copyright header formatting
95617d
  - JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java should not specify TLS version
95617d
  - JDK-8239334: Tab Size does not work correctly in JTextArea with setLineWrap on
95617d
  - JDK-8239422: [TESTBUG] compiler/c1/TestPrintIRDuringConstruction.java failed when C1 is disabled
95617d
  - JDK-8239827: The test OpenByUNCPathNameTest.java should be changed to be manual
95617d
  - JDK-8240256: Better resource cleaning for SunPKCS11 Provider
95617d
  - JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test Server
95617d
  - JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/bug8020708.java fails in mach5 ubuntu system
95617d
  - JDK-8242793: Incorrect copyright header in ContinuousCallSiteTargetChange.java
95617d
  - JDK-8243543: jtreg test security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java fails
95617d
  - JDK-8244292: Headful clients failing with --illegal-access=deny
95617d
  - JDK-8245147: Refactor and improve utility of test/langtools/tools/javac/versions/Versions.java
95617d
  - JDK-8245165: Update bug id for javax/swing/text/StyledEditorKit/4506788/bug4506788.java in ProblemList
95617d
  - JDK-8245665: Test WeakAlg.java should only make sure no warning for weak signature algorithms by keytool on root CA
95617d
  - JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails after 8241072 (multi-homed systems)
95617d
  - JDK-8246807: Incorrect copyright header in TimeZoneDatePermissionCheck.sh
95617d
  - JDK-8247403: JShell: No custom input (e.g. from GUI) possible with JavaShellToolBuilder
95617d
  - JDK-8247510: typo in IllegalHandshakeMessage
95617d
  - JDK-8248187: [TESTBUG] javax/swing/plaf/basic/BasicGraphicsUtils/8132119/bug8132119.java fails with String is not properly drawn
95617d
  - JDK-8248341: ProblemList java/lang/management/ThreadMXBean/ThreadMXBeanStateTest.java
95617d
  - JDK-8248500: AArch64: Remove the r18 dependency on Windows AArch64
95617d
  - JDK-8248899: security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked
95617d
  - JDK-8249195: Change to Xcode 11.3.1 for building on Macos at Oracle
95617d
  - JDK-8250521: Configure initial RTO to use minimal retry for loopback connections on Windows
95617d
  - JDK-8250810: Push missing parts of JDK-8248817
95617d
  - JDK-8250839: Improve test template SSLEngineTemplate with SSLContextTemplate
95617d
  - JDK-8250863: Build error with GCC 10 in NetworkInterface.c and k_standard.c
95617d
  - JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/gf08t001/TestDriver.java fails
95617d
  - JDK-8251155: HostIdentifier fails to canonicalize hostnames starting with digits
95617d
  - JDK-8251377: [macos11] JTabbedPane selected tab text is barely legible
95617d
  - JDK-8251570: JDK-8215624 causes assert(worker_id < _n_workers) failed: Invalid worker_id
95617d
  - JDK-8251930: AArch64: Native types mismatch in hotspot
95617d
  - JDK-8252049: Native memory leak in ciMethodData ctor
95617d
  - JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x friendly
95617d
  - JDK-8252114: Windows-AArch64: Enable and test ZGC and ShenandoahGC
95617d
  - JDK-8253015: Aarch64: Move linux code out from generic CPU feature detection
95617d
  - JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java fail on big screens
95617d
  - JDK-8253497: Core Libs Terminology Refresh
95617d
  - JDK-8253682: The AppletInitialFocusTest1.java is unstable
95617d
  - JDK-8253763: ParallelObjectIterator should have virtual destructor
95617d
  - JDK-8253866: Security Libs Terminology Refresh
95617d
  - JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in "try throwing in GET_BODY"
95617d
  - JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java intermittently failing with TestServer: start exception: java.io.IOException: Invalid preface
95617d
  - JDK-8255264: Support for identifying the full range of IPv4 localhost addresses on Windows
95617d
  - JDK-8255716: AArch64: Regression: JVM crashes if manually offline a core
95617d
  - JDK-8255722: Create a new test for rotated blit
95617d
  - JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
95617d
  - JDK-8256066: Tests use deprecated TestNG API that is no longer available in new versions
95617d
  - JDK-8256152: tests fail because of ambiguous method resolution
95617d
  - JDK-8256182: Update qemu-debootstrap cross-compilation recipe
95617d
  - JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/FullscreenWindowProps.java failed
95617d
  - JDK-8256202: Some tweaks for jarsigner tests PosixPermissionsTest and SymLinkTest
95617d
  - JDK-8256372: [macos] Unexpected symbol was displayed on JTextField with Monospaced font
95617d
  - JDK-8256956: RegisterImpl::max_slots_per_register is incorrect on AMD64
95617d
  - JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with InvalidPathException on windows
95617d
  - JDK-8258855: Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3
95617d
  - JDK-8259237: Demo selection changes with left/right arrow key. No need to press space for selection.
95617d
  - JDK-8260571: Add PrintMetaspaceStatistics to print metaspace statistics upon VM exit
95617d
  - JDK-8260690: JConsole User Guide Link from the Help menu is not accessible by keyboard
95617d
  - JDK-8261036: Reduce classes loaded by CleanerFactory initialization
95617d
  - JDK-8261071: AArch64: Refactor interpreter native wrappers
95617d
  - JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch implementation
95617d
  - JDK-8261236: C2: ClhsdbJstackXcompStress test fails when StressGCM is enabled
95617d
  - JDK-8261297: NMT: Final report should use scale 1
95617d
  - JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java fails because Reserved memory size is too big
95617d
  - JDK-8261916: gtest/GTestWrapper.java vmErrorTest.unimplemented1_vm_assert failed
95617d
  - JDK-8262438: sun/security/ssl/SSLLogger/LoggingFormatConsistency.java failed with "SocketException: Socket is closed"
95617d
  - JDK-8262731: [macOS] Exception from "Printable.print" is swallowed during "PrinterJob.print"
95617d
  - JDK-8262844: (fs) FileStore.supportsFileAttributeView might return false negative in case of ext3
95617d
  - JDK-8263059: security/infra/java/security/cert/CertPathValidator/certification/ComodoCA.java fails due to revoked cert
95617d
  - JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
95617d
  - JDK-8263303: C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint
95617d
  - JDK-8263362: Avoid division by 0 in  java/awt/font/TextJustifier.java justify
95617d
  - JDK-8263773: Reenable German localization for builds at Oracle
95617d
  - JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java failed with "java.lang.RuntimeException: Wrong method"
95617d
  - JDK-8264526: javax/swing/text/html/parser/Parser/8078268/bug8078268.java timeout
95617d
  - JDK-8264824: java/net/Inet6Address/B6206527.java doesn't close ServerSocket properly
95617d
  - JDK-8265019: Update tests for additional TestNG test permissions
95617d
  - JDK-8265173: [test] divert spurious log output away from stream under test in ProcessBuilder Basic test
95617d
  - JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
95617d
  - JDK-8266182: Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java
95617d
  - JDK-8266579: Update test/jdk/java/lang/ProcessHandle/PermissionTest.java & test/jdk/java/sql/testng/util/TestPolicy.java
95617d
  - JDK-8266949: Check possibility to disable OperationTimedOut on Unix
95617d
  - JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg tests on many-core machines
95617d
  - JDK-8267256: Extend minimal retry for loopback connections on Windows to PlainSocketImpl
95617d
  - JDK-8267304: Bump global JTReg memory limit to 768m
95617d
  - JDK-8267652: c2 loop unrolling by 8 results in reading memory past array
95617d
  - JDK-8268019: C2: assert(no_dead_loop) failed: dead loop detected
95617d
  - JDK-8268093: Manual Testcase: "sun/security/krb5/config/native/TestDynamicStore.java" Fails with NPE
95617d
  - JDK-8268555: Update HttpClient tests that use ITestContext to jtreg 6+1
95617d
  - JDK-8268672: C2: assert(!loop->is_member(u_loop)) failed: can be in outer loop or out of both loops only
95617d
  - JDK-8269034: AccessControlException for SunPKCS11 daemon threads
95617d
  - JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to accessClassAndFindClass
95617d
  - JDK-8269574: C2: Avoid redundant uncommon traps in GraphKit::builtin_throw() for JVMTI exception events
95617d
  - JDK-8269656: The test test/langtools/tools/javac/versions/Versions.java has duplicate test cycles
95617d
  - JDK-8269768: JFR Terminology Refresh
95617d
  - JDK-8269951: [macos] Focus not painted in JButton when  setBorderPainted(false) is invoked
95617d
  - JDK-8269984: [macos] JTabbedPane title looks like  disabled
95617d
  - JDK-8269993: [Test]: java/net/httpclient/DigestEchoClientSSL.java contains redundant @run tags
95617d
  - JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to run in all LaFs, including Aqua on macOS
95617d
  - JDK-8270216: [macOS] Update named used for Java run loop mode
95617d
  - JDK-8270280: security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java  OCSP response error
95617d
  - JDK-8270290: NTLM authentication fails if HEAD request is used
95617d
  - JDK-8270317: Large Allocation in CipherSuite
95617d
  - JDK-8270344: Session resumption errors
95617d
  - JDK-8270517: Add Zero support for LoongArch
95617d
  - JDK-8270533: AArch64: size_fits_all_mem_uses should return false if its output is a CAS
95617d
  - JDK-8270886: Crash in PhaseIdealLoop::verify_strip_mined_scheduling
95617d
  - JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with "lists don't have the same size expected"
95617d
  - JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
95617d
  - JDK-8271341: Opcode() != Op_If && Opcode() != Op_RangeCheck) || outcnt() == 2 assert failure with Test7179138_1.java
95617d
  - JDK-8271459: C2: Missing NegativeArraySizeException when creating StringBuilder with negative capacity
95617d
  - JDK-8271490: [ppc] [s390]: Crash in JavaThread::pd_get_top_frame_for_profiling
95617d
  - JDK-8271560: sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java still fails due to "An established connection was aborted by the software in your host machine"
95617d
  - JDK-8271567: AArch64: AES Galois CounterMode (GCM) interleaved implementation using vector instructions
95617d
  - JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
95617d
  - JDK-8272181: Windows-AArch64:Backport fix of `Backtracing broken on PAC enabled systems`
95617d
  - JDK-8272316: Wrong Boot JDK help message in 11
95617d
  - JDK-8272318: Improve performance of HeapDumpAllTest
95617d
  - JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/PageDialogMarginTest.java catches all exceptions
95617d
  - JDK-8272570: C2: crash in PhaseCFG::global_code_motion
95617d
  - JDK-8272574: C2: assert(false) failed: Bad graph detected in build_loop_late
95617d
  - JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182
95617d
  - JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled
95617d
  - JDK-8272720: Fix the implementation of loop unrolling heuristic with LoopPercentProfileLimit
95617d
  - JDK-8272783: Epsilon: Refactor tests to improve performance
95617d
  - JDK-8272806: [macOS] "Apple AWT Internal Exception" when input method is changed
95617d
  - JDK-8272828: Add correct licenses to jszip.md
95617d
  - JDK-8272836: Limit run time for java/lang/invoke/LFCaching tests
95617d
  - JDK-8272850: Drop zapping values in the Zap* option descriptions
95617d
  - JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
95617d
  - JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test groups
95617d
  - JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java fails by timeout
95617d
  - JDK-8273026: Slow LoginContext.login() on multi threading application
95617d
  - JDK-8273229: Update OS detection code to recognize Windows Server 2022
95617d
  - JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on Windows 32bit
95617d
  - JDK-8273308: PatternMatchTest.java fails on CI
95617d
  - JDK-8273314: Add tier4 test groups
95617d
  - JDK-8273342: Null pointer dereference in classFileParser.cpp:2817
95617d
  - JDK-8273358: macOS Monterey does not have the font Times needed by Serif
95617d
  - JDK-8273373: Zero: Cannot invoke JVM in primordial threads on Zero
95617d
  - JDK-8273498: compiler/c2/Test7179138_1.java timed out
95617d
  - JDK-8273541: Cleaner Thread creates with normal priority instead of MAX_PRIORITY - 2
95617d
  - JDK-8273547: [11u] [JVMCI] Partial module-info.java backport of JDK-8223332
95617d
  - JDK-8273606: Zero: SPARC64 build fails with si_band type mismatch
95617d
  - JDK-8273646: Add openssl from path variable also in to Default System Openssl Path in OpensslArtifactFetcher
95617d
  - JDK-8273671: Backport of 8260616 misses one JNF header inclusion removal
95617d
  - JDK-8273790: Potential cyclic dependencies between Gregorian and CalendarSystem
95617d
  - JDK-8273795: Zero SPARC64 debug builds fail due to missing interpreter fields
95617d
  - JDK-8273826: Correct Manifest file name and NPE checks
95617d
  - JDK-8273894: ConcurrentModificationException raised every time ReferralsCache drops referral
95617d
  - JDK-8273924: ArrayIndexOutOfBoundsException thrown in java.util.JapaneseImperialCalendar.add()
95617d
  - JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file path contains '+' character
95617d
  - JDK-8273968: JCK javax_xml tests fail in CI
95617d
  - JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
95617d
  - JDK-8274083: Update testing docs to mention tiered testing
95617d
  - JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork is deprecated
95617d
  - JDK-8274326: [macos] Ensure initialisation of sun/lwawt/macosx/CAccessibility in JavaComponentAccessibility.m
95617d
  - JDK-8274329: Fix non-portable HotSpot code in MethodMatcher::parse_method_pattern
95617d
  - JDK-8274381: missing CAccessibility definitions in JNI code
95617d
  - JDK-8274407: (tz) Update Timezone Data to 2021c
95617d
  - JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
95617d
  - JDK-8274468: TimeZoneTest.java fails with tzdata2021b
95617d
  - JDK-8274522: java/lang/management/ManagementFactory/MXBeanException.java test fails with Shenandoah
95617d
  - JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with NoSuchElementException after JDK-8271287
95617d
  - JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently fails on weak memory model platform
95617d
  - JDK-8274779: HttpURLConnection: HttpClient and HttpsClient incorrectly check request method when set to POST
95617d
  - JDK-8274840: Update OS detection code to recognize Windows 11
95617d
  - JDK-8274860: gcc 10.2.1 produces an uninitialized warning in sharedRuntimeTrig.cpp
95617d
  - JDK-8275051: Shenandoah: Correct ordering of requested gc cause and gc request flag
95617d
  - JDK-8275131: Exceptions after a touchpad gesture on macOS
95617d
  - JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
95617d
  - JDK-8275766: (tz) Update Timezone Data to 2021e
95617d
  - JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
95617d
  - JDK-8276066: Reset LoopPercentProfileLimit for x86 due to suboptimal performance
95617d
  - JDK-8276139: TestJpsHostName.java not reliable, better to expand HostIdentifierCreate.java test
95617d
  - JDK-8276157: C2: Compiler stack overflow during escape analysis on Linux x86_32
95617d
  - JDK-8276201: Shenandoah: Race results degenerated GC to enter wrong entry point
95617d
  - JDK-8276536: Update TimeZoneNames files to follow the changes made by JDK-8275766
95617d
  - JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
95617d
  - JDK-8276774: Cookie stored in CookieHandler not sent if user headers contain cookie
95617d
  - JDK-8276854: Windows GHA builds fail due to broken Cygwin
95617d
  - JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify output array sizes
95617d
  - JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString() throws NPE
95617d
  - JDK-8277529: SIGSEGV in C2 CompilerThread Node::rematerialize() compiling Packet::readUnsignedTrint
95617d
  - JDK-8277815: Fix mistakes in legal header backports
95617d
95617d
Notes on individual issues:
95617d
===========================
95617d
95617d
core-svc/tools:
95617d
95617d
JDK-8250554: New Option Added to jcmd for Writing a gzipped Heap Dump
95617d
=====================================================================
95617d
A new integer option `gz` has been added to the `GC.heap_dump`
95617d
diagnostic command. If it is specified, it will enable the gzip
95617d
compression of the written heap dump. The supplied value is the
95617d
compression level. It can range from 1 (fastest) to 9 (slowest, but
95617d
best compression). The recommended level is 1.
95617d
95617d
security-libs/javax.net.ssl:
95617d
95617d
JDK-8260310: Configurable Extensions With System Properties
95617d
===========================================================
95617d
Two new system properties have been added. The system property,
95617d
`jdk.tls.client.disableExtensions`, is used to disable TLS extensions
95617d
used in the client. The system property,
95617d
`jdk.tls.server.disableExtensions`, is used to disable TLS extensions
95617d
used in the server. If an extension is disabled, it will be neither
95617d
produced nor processed in the handshake messages.
95617d
95617d
The property string is a list of comma separated standard TLS
95617d
extension names, as registered in the IANA documentation (for example,
95617d
server_name, status_request, and signature_algorithms_cert). Note that
95617d
the extension names are case sensitive. Unknown, unsupported,
95617d
misspelled and duplicated TLS extension name tokens will be ignored.
95617d
95617d
Please note that the impact of blocking TLS extensions is
95617d
complicated. For example, a TLS connection may not be able to be
95617d
established if a mandatory extension is disabled. Please do not
95617d
disable mandatory extensions, and do not use this feature unless you
95617d
clearly understand the impact.
95617d
95617d
security-libs/javax.crypto:pkcs11:
95617d
95617d
JDK-8272907: New SunPKCS11 Configuration Properties
95617d
===================================================
95617d
The SunPKCS11 provider gains new provider configuration attributes to
95617d
better control native resources usage. The SunPKCS11 provider consumes
95617d
native resources in order to work with native PKCS11 libraries. To
95617d
manage and better control the native resources, additional
95617d
configuration attributes are added to control the frequency of
95617d
clearing native references as well as whether to destroy the
95617d
underlying PKCS11 Token after logout.
95617d
95617d
The 3 new attributes for the SunPKCS11 provider configuration file
95617d
are:
95617d
95617d
1) `destroyTokenAfterLogout` (boolean, defaults to false)
95617d
95617d
If set to true, when `java.security.AuthProvider.logout()` is called
95617d
upon the SunPKCS11 provider instance, the underlying Token object will
95617d
be destroyed and resources will be freed. This essentially renders the
95617d
SunPKCS11 provider instance unusable after `logout()` calls. Note that
95617d
a PKCS11 provider with this attribute set to `true` should not be
95617d
added to the system provider list since the provider object is not
95617d
usable after a `logout()` method call.
95617d
95617d
2) `cleaner.shortInterval` (integer, defaults to 2000, in milliseconds)
95617d
95617d
This defines the frequency for clearing native references during busy
95617d
periods (such as, how often should the cleaner thread processes the
95617d
no-longer-needed native references in the queue to free up native
95617d
memory). Note that the cleaner thread will switch to the
95617d
'longInterval' frequency after 200 failed tries (such as, when no
95617d
references are found in the queue).
95617d
95617d
3) `cleaner.longInterval` (integer, defaults to 60000, in milliseconds)
95617d
95617d
This defines the frequency for checking native reference during
95617d
non-busy period (such as, how often should the cleaner thread check
95617d
the queue for native references). Note that the cleaner thread will
95617d
switch back to the 'shortInterval' value if native PKCS11 references
95617d
for cleaning are detected.
95617d
95617d
core-libs/java.nio:
95617d
95617d
JDK-8271517: Zip File System Provider Throws ZipException when entry name element contains "." or "."
95617d
=====================================================================================================
95617d
The ZIP file system provider has been changed to reject existing ZIP
95617d
files that contain entries with "." or ".." in name elements. ZIP
95617d
files with these entries can not be used as a file system. Invoking
95617d
the `java.nio.file.FileSystems.newFileSystem(...)` methods will throw
95617d
`ZipException` if the ZIP file contains these entries.
95617d
95617d
security-libs/java.security:
95617d
95617d
JDK-8272535: Removed Google's GlobalSign Root Certificate
95617d
=========================================================
95617d
The following root certificate from Google has been removed from the
95617d
`cacerts` keystore:
95617d
95617d
Alias Name: globalsignr2ca [jdk]
95617d
Distinguished Name: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
95617d
95617d
core-libs/java.time:
95617d
95617d
JDK-8274857:  Update Timezone Data to 2021c
95617d
===========================================
95617d
IANA Time Zone Database, on which JDK's Date/Time libraries are based,
95617d
has been updated to version 2021c
95617d
(https://mm.icann.org/pipermail/tz-announce/2021-October/000067.html). Note
95617d
that with this update, some of the time zone rules prior to the year
95617d
1970 have been modified according to the changes which were introduced
95617d
with 2021b. For more detail, refer to the announcement of 2021b
95617d
(https://mm.icann.org/pipermail/tz-announce/2021-September/000066.html)
95617d
95617d
New in release OpenJDK 11.0.13 (2021-10-19):
95617d
=============================================
95617d
Live versions of these release notes can be found at:
95617d
  * https://bitly.com/openjdk11013
95617d
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.13.txt
95617d
95617d
* Security fixes
95617d
  - JDK-8163326, CVE-2021-35550: Update the default enabled cipher suites preference
95617d
  - JDK-8254967, CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close
95617d
  - JDK-8263314: Enhance XML Dsig modes
95617d
  - JDK-8265167, CVE-2021-35556: Richer Text Editors
95617d
  - JDK-8265574: Improve handling of sheets
95617d
  - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit
95617d
  - JDK-8265776: Improve Stream handling for SSL
95617d
  - JDK-8266097, CVE-2021-35561: Better hashing support
95617d
  - JDK-8266103: Better specified spec values
95617d
  - JDK-8266109: More Resilient Classloading
95617d
  - JDK-8266115: More Manifest Jar Loading
95617d
  - JDK-8266137, CVE-2021-35564: Improve Keystore integrity
95617d
  - JDK-8266689, CVE-2021-35567: More Constrained Delegation
95617d
  - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic
95617d
  - JDK-8267712: Better LDAP reference processing
95617d
  - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking
95617d
  - JDK-8267735, CVE-2021-35586: Better BMP support
95617d
  - JDK-8268193: Improve requests of certificates
95617d
  - JDK-8268199: Correct certificate requests
95617d
  - JDK-8268205: Enhance DTLS client handshake
95617d
  - JDK-8268506: More Manifest Digests
95617d
  - JDK-8269618, CVE-2021-35603: Better session identification
95617d
  - JDK-8269624: Enhance method selection support
95617d
  - JDK-8270398: Enhance canonicalization
95617d
  - JDK-8270404: Better canonicalization
95617d
* Other changes
95617d
  - JDK-8024368: private methods are allocated vtable indices
95617d
  - JDK-8042902: Test java/net/Inet6Address/serialize/Inet6AddressSerializationTest.java fails intermittently
95617d
  - JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
95617d
  - JDK-8157404: Unable to read certain PKCS12 keystores from SequenceInputStream
95617d
  - JDK-8158066: SourceDebugExtensionTest fails to rename file
95617d
  - JDK-8168304: Make all of DependencyContext_test available in product mode
95617d
  - JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java fails intermittently with BindException
95617d
  - JDK-8181313: SA: Remove libthread_db dependency on Linux
95617d
  - JDK-8193214: Incorrect annotations.without.processors warnings with JDK 9
95617d
  - JDK-8194230: jdk/internal/jrtfs/remote/RemoteRuntimeImageTest.java fails with java.lang.NullPointerException
95617d
  - JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java fails
95617d
  - JDK-8199931: java/net/MulticastSocket/UnreferencedMulticastSockets.java fails with "incorrect data received"
95617d
  - JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK version changes
95617d
  - JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java failed on Mac 10.13 with zh_CN and zh_TW locales.
95617d
  - JDK-8207316: java/nio/channels/spi/SelectorProvider/inheritedChannel/InheritedChannelTest.java failed
95617d
  - JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
95617d
  - JDK-8208363: test/jdk/java/lang/Package/PackageFromManifest.java missing module dependencies declaration
95617d
  - JDK-8209380: ARM: cleanup maybe-uninitialized and reorder compiler warnings
95617d
  - JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh to plain java test
95617d
  - JDK-8209772: Refactor shell test java/util/ServiceLoader/basic/basic.sh to java
95617d
  - JDK-8209773: Refactor shell test javax/naming/module/basic.sh to java
95617d
  - JDK-8209832: Refactor jdk/internal/reflect/Reflection/GetCallerClassTest.sh to plain java test
95617d
  - JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh to plain java test
95617d
  - JDK-8210406: Refactor java.util.PluggableLocale:i18n shell tests to plain java tests
95617d
  - JDK-8210407: Refactor java.util.Calendar:i18n shell tests to plain java tests
95617d
  - JDK-8210495: compiler crashes because of illegal signature in otherwise legal code
95617d
  - JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time image layout
95617d
  - JDK-8210802: temp files left by tests in jdk/java/net/httpclient
95617d
  - JDK-8210819: Update the host name in CNameTest.java
95617d
  - JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain java test
95617d
  - JDK-8210934: Move sun/net/www/protocol/http/GetErrorStream.java to OpenJDK
95617d
  - JDK-8210959: JShell fails and exits when statement throws an exception whose message contains a '%'.
95617d
  - JDK-8211055: Provide print to a file (PDF) feature even when printer was not connected
95617d
  - JDK-8211092: test/jdk/sun/net/www/http/HttpClient/MultiThreadTest.java fails intermittently when cleaning up
95617d
  - JDK-8211296: Remove HotSpot deprecation warning suppression for Mac/clang
95617d
  - JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails with cleaning up
95617d
  - JDK-8212040: Compilation error due to wrong usage of NSPrintJobDispositionValue in mac10.12
95617d
  - JDK-8212695: Add explicit timeout to several HTTP Client tests
95617d
  - JDK-8212718: Refactor some annotation processor tests to better use collections
95617d
  - JDK-8213007: Update the link in test/jdk/sun/security/provider/SecureRandom/DrbgCavp.java
95617d
  - JDK-8213137: Remove static initialization of monitor/mutex instances
95617d
  - JDK-8213235: java/nio/channels/SocketChannel/AsyncCloseChannel.java fails with threads that didn't exit
95617d
  - JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests to plain java tests
95617d
  - JDK-8213576: Make test AsyncCloseChannel.java run in othervm
95617d
  - JDK-8213694: Test Timeout.java should run in othervm mode
95617d
  - JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/except/except002 and except003
95617d
  - JDK-8213922: fix ctw stand-alone build
95617d
  - JDK-8214195: Align stdout messages in test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
95617d
  - JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/NonUniqueAliases.java failed with incorrect jtreg tags order
95617d
  - JDK-8214937: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed due to unexpected expiration date
95617d
  - JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
95617d
  - JDK-8217825: Verify @AfterTest is used correctly in WebSocket tests
95617d
  - JDK-8218145: block_if_requested is not proper inlined due to size
95617d
  - JDK-8219417: bump jtreg requiredVersion to b14
95617d
  - JDK-8219552: bump jtreg requiredVersion to b14 in test/jdk/sanity/client/
95617d
  - JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails intermittently due to NumberFormatException
95617d
  - JDK-8220445: Support for side by side MSVC Toolset versions
95617d
  - JDK-8221988: add possibility to build with Visual Studio 2019
95617d
  - JDK-8222751: closed/test/jdk/sun/security/util/DerIndefLenConverter/IndefBerPkcs12.java fail
95617d
  - JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use Dependencies::find_unique_concrete_method() for non-virtual methods
95617d
  - JDK-8224853: CDS address sanitizer errors
95617d
  - JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021
95617d
  - JDK-8225583: Examine the HttpResponse.BodySubscribers for null handling and multiple subscriptions
95617d
  - JDK-8225690: Multiple AttachListener threads can be created
95617d
  - JDK-8225790: Two NestedDialogs tests fail on Ubuntu
95617d
  - JDK-8226319: Add forgotten test/jdk/java/net/httpclient/BodySubscribersTest.java
95617d
  - JDK-8226533: JVMCI: findUniqueConcreteMethod should handle statically bindable methods directly
95617d
  - JDK-8226602: Test convenience reactive primitives from java.net.http with RS TCK
95617d
  - JDK-8226683: Remove review suggestion from fix to 8219804
95617d
  - JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due to "exit code is 134"
95617d
  - JDK-8227766: CheckUnhandledOops is broken in MemAllocator
95617d
  - JDK-8227815: Minimal VM: set_state is not a member of AttachListener
95617d
  - JDK-8230674: Heap dumps should exclude dormant CDS archived objects of unloaded classes
95617d
  - JDK-8230808: Remove Access::equals()
95617d
  - JDK-8230841: Remove oopDesc::equals()
95617d
  - JDK-8231717: Improve performance of charset decoding when charset is always compactable
95617d
  - JDK-8232243: Wrong caret position in JTextPane on Windows with a screen resolution > 100%
95617d
  - JDK-8232782: Shenandoah: streamline post-LRB CAS barrier (aarch64)
95617d
  - JDK-8233790: Forward output from heap dumper to jcmd/jmap
95617d
  - JDK-8233989: Create an IPv4 version of java/net/MulticastSocket/SetLoopbackMode.java
95617d
  - JDK-8234510: Remove file seeking requirement for writing a heap dump
95617d
  - JDK-8235211: serviceability/attach/RemovingUnixDomainSocketTest.java fails with AttachNotSupportedException: Unable to open socket file
95617d
  - JDK-8235216: typo in test filename
95617d
  - JDK-8235866: bump jtreg requiredVersion to 4.2b16
95617d
  - JDK-8236111: narrow allowSmartActionArgs disabling
95617d
  - JDK-8236413: AbstractConnectTimeout should tolerate both NoRouteToHostException and UnresolvedAddressException
95617d
  - JDK-8236671: NullPointerException in JKS keystore
95617d
  - JDK-8238930: problem list compiler/c2/Test8004741.java
95617d
  - JDK-8238943: switch to jtreg 5.0
95617d
  - JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS breaks QuietOption.java test
95617d
  - JDK-8240983: Incorrect copyright header in Apache Santuario 2.1.3 files
95617d
  - JDK-8241336: Some java.net tests failed with NoRouteToHostException on MacOS with special network configuration
95617d
  - JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
95617d
  - JDK-8241768: git needs .gitattributes
95617d
  - JDK-8242882: opening jar file with large manifest might throw NegativeArraySizeException
95617d
  - JDK-8244973: serviceability/attach/RemovingUnixDomainSocketTest.java fails "stderr was not empty"
95617d
  - JDK-8245134: test/lib/jdk/test/lib/security/KeyStoreUtils.java should allow to specify aliases
95617d
  - JDK-8246261: TCKLocalTime.java failed due to "AssertionError: expected [18:14:22] but found [18:14:23]"
95617d
  - JDK-8246387: switch to jtreg 5.1
95617d
  - JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed allocating blob
95617d
  - JDK-8247469: getSystemCpuLoad() returns -1 on linux when some offline cpus are present and cpusets.effective_cpus is not available
95617d
  - JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/TextLayout/ArabicDiacriticTest.java can leave frame open
95617d
  - JDK-8248403: AArch64: Remove uses of kernel integer types
95617d
  - JDK-8248414: AArch64: Remove uses of long and unsigned long ints
95617d
  - JDK-8248657: Windows: strengthening in ThreadCritical regarding memory model
95617d
  - JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
95617d
  - JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
95617d
  - JDK-8248671: AArch64: Remove unused variables
95617d
  - JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
95617d
  - JDK-8248816: C1: Fix signature conflict in LIRGenerator::strength_reduce_multiply
95617d
  - JDK-8249095: tools/javac/launcher/SourceLauncherTest.java fails on Windows
95617d
  - JDK-8249548: backward focus traversal gets stuck in button group
95617d
  - JDK-8249773: Upgrade ReceiveISA.java test to be resilient to failure due to stray packets and interference
95617d
  - JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o bug-id
95617d
  - JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses @ignore w/o bug-id
95617d
  - JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses @ignore w/o bug-id
95617d
  - JDK-8250588: Shenandoah: LRB needs to save/restore fp registers for runtime call
95617d
  - JDK-8250824: AArch64: follow up for JDK-8248414
95617d
  - JDK-8251166: Add automated testcases for changes done in JDK-8214112
95617d
  - JDK-8251252: Add automated testcase for fix done in JDK-8214253
95617d
  - JDK-8251254: Add automated test for fix done in JDK-8218472
95617d
  - JDK-8251361: Potential race between Logger configuration and GCs in HttpURLConWithProxy test
95617d
  - JDK-8251549: Update docs on building for Git
95617d
  - JDK-8251945: SIGSEGV in PackageEntry::purge_qualified_exports()
95617d
  - JDK-8252194: Add automated test for fix done in JDK-8218469
95617d
  - JDK-8252648: Shenandoah: name gang tasks consistently
95617d
  - JDK-8252825: Add automated test for fix done in JDK-8218479
95617d
  - JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java fails intermittently with C1
95617d
  - JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially consistent
95617d
  - JDK-8253048: AArch64: When CallLeaf, no need to preserve callee-saved registers in caller
95617d
  - JDK-8253424: Add support for running pre-submit testing using GitHub Actions
95617d
  - JDK-8253631: Remove unimplemented CompileBroker methods after JEP-165
95617d
  - JDK-8253865: Pre-submit testing using GitHub Actions does not detect failures reliably
95617d
  - JDK-8253899: Make IsClassUnloadingEnabled signature match specification
95617d
  - JDK-8254024: Enhance native libs for AWT and Swing to work with GraalVM Native Image
95617d
  - JDK-8254054: Pre-submit testing using GitHub Actions should not use the deprecated set-env command
95617d
  - JDK-8254173: Add Zero, Minimal hotspot targets to submit workflow
95617d
  - JDK-8254175: Build no-pch configuration in debug mode for submit checks
95617d
  - JDK-8254244: Some code emitted by TemplateTable::branch is unused when running TieredCompilation
95617d
  - JDK-8254270: linux 32 bit build doesn't compile libjdwp/log_messages.c
95617d
  - JDK-8254282: Add Linux x86_32 builds to submit workflow
95617d
  - JDK-8254850: Update terminology in java.awt.GridBagLayout source code comments
95617d
  - JDK-8255255: Update Apache Santuario (XML Signature) to version 2.2.1
95617d
  - JDK-8255305: Add Linux x86_32 tier1 to submit workflow
95617d
  - JDK-8255352: Archive important test outputs in submit workflow
95617d
  - JDK-8255373: Submit workflow artifact name is always "test-results_.zip"
95617d
  - JDK-8255452: Doing GC during JVMTI MethodExit event posting breaks return oop
95617d
  - JDK-8255718: Zero: VM should know it runs in interpreter-only mode
95617d
  - JDK-8255790: GTKL&F: Java 16 crashes on initialising GTKL&F on Manjaro Linux
95617d
  - JDK-8255810: Zero: build fails without JVMTI
95617d
  - JDK-8255895: Submit workflow artifacts miss hs_errs/replays due to ZIP include mismatch
95617d
  - JDK-8256127: Add cross-compiled foreign architectures builds to submit workflow
95617d
  - JDK-8256215: Shenandoah: re-organize saving/restoring machine state in assembler code
95617d
  - JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for x86_32 and lower -XX:+UseSSE
95617d
  - JDK-8256277: Github Action build on macOS should define OS and Xcode versions
95617d
  - JDK-8256354: Github Action build on Windows should define OS and MSVC versions
95617d
  - JDK-8256393: Github Actions build on Linux should define OS and GCC versions
95617d
  - JDK-8256414: add optimized build to submit workflow
95617d
  - JDK-8256747: GitHub Actions: decouple the hotspot build-only jobs from Linux x64 testing
95617d
  - JDK-8257056: Submit workflow should apt-get update to avoid package installation errors
95617d
  - JDK-8257148: Remove obsolete code in AWTView.m
95617d
  - JDK-8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280
95617d
  - JDK-8257620: Do not use objc_msgSend_stret to get macOS version
95617d
  - JDK-8257913: Add more known library locations to simplify Linux cross-compilation
95617d
  - JDK-8258703: Incorrect 512-bit vector registers restore on x86_32
95617d
  - JDK-8259338: Add expiry exception for identrustdstx3 alias to VerifyCACerts.java test
95617d
  - JDK-8259535: ECDSA SignatureValue do not always have the specified length
95617d
  - JDK-8259679: GitHub actions should use MSVC 14.28
95617d
  - JDK-8259924: GitHub actions fail on Linux x86_32 with "Could not configure libc6:i386"
95617d
  - JDK-8260460: GitHub actions still fail on Linux x86_32 with "Could not configure libc6:i386"
95617d
  - JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
95617d
  - JDK-8260923: Add more tests for SSLSocket input/output shutdown
95617d
  - JDK-8261072: AArch64: Fix MacroAssembler::get_thread convention
95617d
  - JDK-8261147: C2: Node is wrongly marked as reduction resulting in a wrong execution due to wrong vector instructions
95617d
  - JDK-8261238: NMT should not limit baselining by size threshold
95617d
  - JDK-8261496: Shenandoah: reconsider pacing updates memory ordering
95617d
  - JDK-8261652: Remove some dead comments from os_bsd_x86
95617d
  - JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync with the StackFrameStream
95617d
  - JDK-8262000: jdk/jfr/event/gc/detailed/TestPromotionFailedEventWithParallelScavenge.java failed with "OutOfMemoryError: Java heap space"
95617d
  - JDK-8262017: C2: assert(n != __null) failed: Bad immediate dominator info.
95617d
  - JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
95617d
  - JDK-8262409: sun/security/ssl/SSLSocketImpl/SSLSocketImplThrowsWrongExceptions. SSL test failures caused by java failed with "Server reported the wrong exception"
95617d
  - JDK-8262470: Printed GlyphVector outline with low DPI has bad quality on Windows
95617d
  - JDK-8262862: Harden tests sun/security/x509/URICertStore/ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
95617d
  - JDK-8263136: C4530 was reported from VS 2019 at access bridge
95617d
  - JDK-8263227: C2: inconsistent spilling due to dead nodes in exception block
95617d
  - JDK-8263382: java/util/logging/ParentLoggersTest.java failed with "checkLoggers: getLoggerNames() returned unexpected loggers"
95617d
  - JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
95617d
  - JDK-8263432: javac may report an invalid package/class clash on case insensitive filesystems
95617d
  - JDK-8263490: [macos] Crash occurs on JPasswordField with activated InputMethod
95617d
  - JDK-8263531: Remove unused buffer int
95617d
  - JDK-8263667: Avoid running GitHub actions on branches named pr/*
95617d
  - JDK-8263776: [JVMCI] add helper to perform Java upcalls
95617d
  - JDK-8264016: [JVMCI] add some thread local fields for use by JVMCI
95617d
  - JDK-8264752: SIGFPE crash with option FlightRecorderOptions:threadbuffersize=30M
95617d
  - JDK-8265132: C2 compilation fails with assert "missing precedence edge"
95617d
  - JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after fix for JDK-8264821
95617d
  - JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay description
95617d
  - JDK-8265756: AArch64: initialize memory allocated for locals according to Windows AArch64 stack page growth requirement in template interpreter
95617d
  - JDK-8265761: Font with missed font family name is not properly printed on Windows
95617d
  - JDK-8265773: incorrect jdeps message "jdk8internals" to describe a removed JDK internal API
95617d
  - JDK-8265836: OperatingSystemImpl.getCpuLoad() returns incorrect CPU load inside a container
95617d
  - JDK-8266018: Shenandoah: fix an incorrect assert
95617d
  - JDK-8266206: Build failure after JDK-8264752 with older GCCs
95617d
  - JDK-8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
95617d
  - JDK-8266288: assert root method not found in witnessed_reabstraction_in_supers is too strong
95617d
  - JDK-8266404: Fatal error report generated with -XX:+CrashOnOutOfMemoryError should not contain suggestion to submit a bug report
95617d
  - JDK-8266480: Implicit null check optimization does not update control of hoisted memory operation
95617d
  - JDK-8266615: C2 incorrectly folds subtype checks involving an interface array
95617d
  - JDK-8266642: Improve ResolvedMethodTable hash function
95617d
  - JDK-8266749: AArch64: Backtracing broken on PAC enabled systems
95617d
  - JDK-8266761: AssertionError in sun.net.httpserver.ServerImpl.responseCompleted
95617d
  - JDK-8266813: Shenandoah: Use shorter instruction sequence for checking if marking in progress
95617d
  - JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due to uninitialized BasicObjectLock::_displaced_header
95617d
  - JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use Metaspace with less classes
95617d
  - JDK-8267396: Avoid recording "pc" in unhandled oops detector for better performance
95617d
  - JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java test failed with assertion
95617d
  - JDK-8267424: CTW: C1 fails with "State must not be null"
95617d
  - JDK-8267459: Pasting Unicode characters into JShell does not work.
95617d
  - JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
95617d
  - JDK-8267666: Add option to jcmd GC.heap_dump to use existing file
95617d
  - JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
95617d
  - JDK-8267751: (test) jtreg.SkippedException has no serial VersionUID
95617d
  - JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle min_jint correctly
95617d
  - JDK-8268103: JNI functions incorrectly return a double after JDK-8265836
95617d
  - JDK-8268127: Shenandoah: Heap size may be too small for region to align to large page size
95617d
  - JDK-8268261: C2: assert(n != __null) failed: Bad immediate dominator info.
95617d
  - JDK-8268347: C2: nested locks optimization may create unbalanced monitor enter/exit code
95617d
  - JDK-8268360: Missing check for infinite loop during node placement
95617d
  - JDK-8268362: [REDO] C2 crash when compile negative Arrays.copyOf length after loop
95617d
  - JDK-8268366: Incorrect calculation of has_fpu_registers in C1 linear scan
95617d
  - JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to missing null check
95617d
  - JDK-8268417: Add test from JDK-8268360
95617d
  - JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance
95617d
  - JDK-8268617: [11u REDO] - WebSocket over authenticating proxy fails with NPE
95617d
  - JDK-8268620: InfiniteLoopException test may fail on x86 platforms
95617d
  - JDK-8268635: Corrupt oop in ClassLoaderData
95617d
  - JDK-8268699: Shenandoah: Add test for JDK-8268127
95617d
  - JDK-8268771: javadoc -notimestamp option does not work on index.html
95617d
  - JDK-8268775: Password is being converted to String in AccessibleJPasswordField
95617d
  - JDK-8268776: Test `ADatagramSocket.java` missing /othervm from @run tag
95617d
  - JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server
95617d
  - JDK-8269304: Regression ~5% in 2005 in b27
95617d
  - JDK-8269415: [11u] Remove ea from DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
95617d
  - JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should be more resilient
95617d
  - JDK-8269529: javax/swing/reliability/HangDuringStaticInitialization.java fails in Windows debug build
95617d
  - JDK-8269594: assert(_handle_mark_nesting > 1) failed: memory leak: allocating handle outside HandleMark
95617d
  - JDK-8269614: [s390] Interpreter checks wrong bit for slow path instance allocation
95617d
  - JDK-8269650: Optimize gc-locker in [Get|Release]StringCritical for latin string
95617d
  - JDK-8269661: JNI_GetStringCritical does not lock char array
95617d
  - JDK-8269668: [aarch64] java.library.path not including /usr/lib64
95617d
  - JDK-8269763: The JEditorPane is blank after JDK-8265167
95617d
  - JDK-8269795: C2: Out of bounds array load floats above its range check in loop peeling resulting in SEGV
95617d
  - JDK-8269847: JDK-8269594 backport breaks 11u builds
95617d
  - JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0
95617d
  - JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers
95617d
  - JDK-8269882: stack-use-after-scope in NewObjectA
95617d
  - JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status
95617d
  - JDK-8270096: Shenandoah: Optimize gc/shenandoah/TestRefprocSanity.java for interpreter mode
95617d
  - JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup
95617d
  - JDK-8270184: [TESTBUG] Add coverage for jvmci ResolvedJavaType.toJavaName() for lambdas
95617d
  - JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns incorrect type name for lambdas
95617d
  - JDK-8270556: Exclude security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA
95617d
  - JDK-8270893: IndexOutOfBoundsException while reading large TIFF file
95617d
  - JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
95617d
  - JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon
95617d
  - JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj
95617d
  - JDK-8272197: Update 11u GHA workflow with Shenandoah configurations
95617d
  - JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz after JDK-8255790
95617d
  - JDK-8272472: StackGuardPages test doesn't build with glibc 2.34
95617d
  - JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used
95617d
  - JDK-8272628: Problemlist gc/stress/gcbasher/TestGCBasherWithCMS.java for x86_32
95617d
  - JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848
95617d
  - JDK-8272772: Shenandoah: compiler/c2/aarch64/TestVolatilesShenandoah.java fails in 11u
95617d
  - JDK-8273939: Backport of 8248414 to JDK11 breaks MacroAssembler::adrp
95617d
95617d
Notes on individual issues:
95617d
===========================
95617d
95617d
security-libs/java.security:
95617d
95617d
JDK-8271434: Removed IdenTrust Root Certificate
95617d
===============================================
95617d
The following root certificate from IdenTrust has been removed from
95617d
the `cacerts` keystore:
95617d
95617d
Alias Name: identrustdstx3 [jdk]
95617d
Distinguished Name: CN=DST Root CA X3, O=Digital Signature Trust Co.
95617d
95617d
JDK-8261922: Updated keytool to Create AKID From SKID of Issuing Certificate as Specified by RFC 5280
95617d
=====================================================================================================
95617d
The `gencert` command of the `keytool` utility has been updated to
95617d
create AKID from the SKID of the issuing certificate as specified by
95617d
RFC 5280.
95617d
95617d
security-libs/javax.net.ssl:
95617d
95617d
JDK-8210799: ChaCha20 and Poly1305 TLS Cipher Suites
95617d
====================================================
95617d
New TLS cipher suites using the `ChaCha20-Poly1305` algorithm have
95617d
been added to JSSE.  These cipher suites are enabled by default.  The
95617d
TLS_CHACHA20_POLY1305_SHA256 cipher suite is available for TLS 1.3.
95617d
The following cipher suites are available for TLS 1.2:
95617d
95617d
* TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
95617d
* TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
95617d
* TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
95617d
95617d
Refer to the "Java Secure Socket Extension (JSSE) Reference Guide" for
95617d
details on these new TLS cipher suites.
95617d
95617d
JDK-8219551: Updated the Default Enabled Cipher Suites Preference
95617d
=================================================================
95617d
The preference of the default enabled cipher suites has been
95617d
changed. The compatibility impact should be minimal. If needed,
95617d
applications can customize the enabled cipher suites and the
95617d
preference. For more details, refer to the SunJSSE provider
95617d
documentation and the JSSE Reference Guide documentation.
95617d
673b76
New in release OpenJDK 11.0.12 (2021-07-20):
673b76
=============================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/openjdk11012
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt
673b76
673b76
* Security fixes
673b76
  - JDK-8256157: Improve bytecode assembly
673b76
  - JDK-8256491: Better HTTP transport
673b76
  - JDK-8258432, CVE-2021-2341: Improve file transfers
673b76
  - JDK-8260453: Improve Font Bounding
673b76
  - JDK-8260960: Signs of jarsigner signing
673b76
  - JDK-8260967, CVE-2021-2369: Better jar file validation
673b76
  - JDK-8262380: Enhance XML processing passes
673b76
  - JDK-8262403: Enhanced data transfer
673b76
  - JDK-8262410: Enhanced rules for zones
673b76
  - JDK-8262477: Enhance String Conclusions
673b76
  - JDK-8262967: Improve Zip file support
673b76
  - JDK-8264066, CVE-2021-2388: Enhance compiler validation
673b76
  - JDK-8264079: Improve abstractions
673b76
  - JDK-8264460: Improve NTLM support
673b76
* Other changes
673b76
  - JDK-6847157: java.lang.NullPointerException: HDC for component at sun.java2d.loops.Blit.Blit
673b76
  - JDK-7106851: Test should not use System.exit
673b76
  - JDK-8073446: TimeZone getOffset API does not  return a dst offset between years 2038-2137
673b76
  - JDK-8076190: Customizing the generation of a PKCS12 keystore
673b76
  - JDK-8153005: Upgrade the default PKCS12 encryption/MAC algorithms
673b76
  - JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java fails on Windows & Linux
673b76
  - JDK-8177068: incomplete classpath causes NPE in Flow
673b76
  - JDK-8185734: [Windows] Structured Exception Catcher missing around gtest execution
673b76
  - JDK-8187450: JNI local refs exceeds capacity warning in NetworkInterface::getAll
673b76
  - JDK-8190763: Class cast exception on (CompoundEdit) UndoableEditEvent.getEdit()
673b76
  - JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt check for non-null terminated strings with length equal to maxLen
673b76
  - JDK-8196100: javax/swing/text/JTextComponent/5074573/bug5074573.java fails
673b76
  - JDK-8199646: JShell tests: jdk/jshell/FailOverDirectExecutionControlTest.java failed with java.lang.UnsupportedOperationException
673b76
  - JDK-8206925: Support the certificate_authorities extension
673b76
  - JDK-8207160: ClassReader::adjustMethodParams can potentially return null if the args list is empty
673b76
  - JDK-8207247: AARCH64: Enable Minimal and Client VM builds
673b76
  - JDK-8207404: MulticastSocket tests failing on AIX
673b76
  - JDK-8207779: Method::is_valid_method() compares 'this' with NULL
673b76
  - JDK-8208061: runtime/LoadClass/TestResize.java fails with "Load factor too high" when running in CDS mode.
673b76
  - JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
673b76
  - JDK-8210443: Migrate Locale matching tests to JDK Repo.
673b76
  - JDK-8213231: ThreadSnapshot::_threadObj can become stale
673b76
  - JDK-8213483: ARM32: runtime/ErrorHandling/ShowRegistersOnAssertTest.java jtreg test fail
673b76
  - JDK-8213725: JShell NullPointerException due to class file with unexpected package
673b76
  - JDK-8213794: ARM32: disable TypeProfiling, CriticalJNINatives, Serviceablity tests for ARM32
673b76
  - JDK-8213845: ARM32: Interpreter doesn't call result handler after native calls
673b76
  - JDK-8214128: ARM32: wrong stack alignment on Deoptimization::unpack_frames
673b76
  - JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java fails on ARM
673b76
  - JDK-8214854: JDWP: Unforseen output truncation in logging
673b76
  - JDK-8214922: Add vectorization support for fmin/fmax
673b76
  - JDK-8215009: GCC 8 compilation error in libjli
673b76
  - JDK-8216184: CDS/appCDS tests failed on Windows due to long path to a classlist file
673b76
  - JDK-8216259: AArch64: Vectorize Adler32 intrinsics
673b76
  - JDK-8216314: SIGILL in CodeHeapState::print_names()
673b76
  - JDK-8217348: assert(thread->is_Java_thread()) failed: just checking
673b76
  - JDK-8217465: [REDO] - Optimize CodeHeap Analytics
673b76
  - JDK-8217561: X86: Add floating-point Math.min/max intrinsics
673b76
  - JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
673b76
  - JDK-8218458: [TESTBUG] runtime/NMT/CheckForProperDetailStackTrace.java fails with Expected stack trace missing from output
673b76
  - JDK-8219142: Remove unused JIMAGE_ResourcePath
673b76
  - JDK-8219586: CodeHeap State Analytics processes dead nmethods
673b76
  - JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
673b76
  - JDK-8220407: compiler/intrinsics/math/TestFpMinMaxIntrinsics.java timedout
673b76
  - JDK-8222302: [TESTBUG]test/hotspot/jtreg/compiler/intrinsics/sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any other CPU
673b76
  - JDK-8222412: AARCH64: multiple instructions encoding issues
673b76
  - JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns into separate instructions
673b76
  - JDK-8223444: Improve CodeHeap Free Space Management
673b76
  - JDK-8223504: Improve performance of forall loops by better inlining of "iterator()" methods
673b76
  - JDK-8223667: ASAN build broken
673b76
  - JDK-8225081: Remove Telia Company CA certificate expiring in April 2021
673b76
  - JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
673b76
  - JDK-8225438: javax/net/ssl/TLSCommon/TestSessionLocalPrincipal.java failed with Read timed out
673b76
  - JDK-8225756: [testbug] compiler/loopstripmining/CheckLoopStripMining.java sets too short a SafepointTimeoutDelay
673b76
  - JDK-8226374: Restrict TLS signature schemes and named groups
673b76
  - JDK-8226627: assert(t->singleton()) failed: must be a constant
673b76
  - JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
673b76
  - JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
673b76
  - JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/Loops04.java failed XMM register should be 0-15
673b76
  - JDK-8227609: (fs) Files.newInputStream(...).skip(n) should allow skipping beyond file size
673b76
  - JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
673b76
  - JDK-8231460: Performance issue (CodeHeap) with large free blocks
673b76
  - JDK-8231713: x86_32 build failures after JDK-8226721 (Missing intrinsics for Math.ceil, floor, rint)
673b76
  - JDK-8231841: AArch64: debug.cpp help() is missing an AArch64 line for pns
673b76
  - JDK-8232084: HotSpot build failed with GCC 9.2.1
673b76
  - JDK-8232591: AArch64: Add missing match rules for smaddl, smsubl and smnegl
673b76
  - JDK-8233185: HttpServer.stop() blocks indefinitely when called on dispatch thread
673b76
  - JDK-8233787: Break cycle in vm_version* includes
673b76
  - JDK-8233948: AArch64: Incorrect mapping between OptoReg and VMReg for high 64 bits of Vector Register
673b76
  - JDK-8234355: Buffer overflow in jcmd GC.class_stats due to too many classes
673b76
  - JDK-8235368: Update BCEL to Version 6.4.1
673b76
  - JDK-8236859: WebSocket over authenticating proxy fails with NPE
673b76
  - JDK-8236992: AArch64: remove redundant load_klass in itable stub
673b76
  - JDK-8237743: test/langtools/jdk/jshell/FailOverExecutionControlTest.java fails No ExecutionControlProvider with name 'nonExistent' and parameter keys: []
673b76
  - JDK-8237804: sun/security/mscapi tests fail with "Key pair not generated, alias <nnnnnn> already exists"
673b76
  - JDK-8238175: CTW: Class.getDeclaredMethods fails with assert(k->is_subclass_of(SystemDictionary::Throwable_klass())) failed: invalid exception class
673b76
  - JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong handling of stoppedMixers
673b76
  - JDK-8238812: assert(false) failed: bad AD file
673b76
  - JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/NSTexturedJFrame.java
673b76
  - JDK-8239386: handle ContendedPaddingWidth in vm_version_aarch64
673b76
  - JDK-8239536: Can't use `java.util.List` object after importing `java.awt.List`
673b76
  - JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
673b76
  - JDK-8240848: ArrayIndexOutOfBoundsException buf for TextCallbackHandler
673b76
  - JDK-8241082: Upgrade IANA Language Subtag Registry data to 03-16-2020 version
673b76
  - JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039 and C2873
673b76
  - JDK-8241101: [s390] jtreg test failure after JDK-8238696: not conformant features string
673b76
  - JDK-8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93)
673b76
  - JDK-8241372: Several test failures due to javax.net.ssl.SSLException: Connection reset
673b76
  - JDK-8241475: AArch64: Add missing support for PopCountVI node
673b76
  - JDK-8241829: Cleanup the code for PrinterJob on windows
673b76
  - JDK-8241960: The SHA3 message digests impl of SUN provider are not thread safe after cloned
673b76
  - JDK-8242010: Upgrade IANA Language Subtag Registry to Version 2020-04-01
673b76
  - JDK-8242429: Better implementation for sign extract
673b76
  - JDK-8242557: Add length limit for strings in PNGImageWriter
673b76
  - JDK-8242919: Paste locks up jshell
673b76
  - JDK-8243155: AArch64: Add support for SqrtVF
673b76
  - JDK-8243240: AArch64: Add support for MulVB
673b76
  - JDK-8243452: JFR: Could not create chunk in repository with over 200 recordings
673b76
  - JDK-8243559: Remove root certificates with 1024-bit keys
673b76
  - JDK-8243597: AArch64: Add support for integer vector abs
673b76
  - JDK-8244031: HttpClient should have more tests for HEAD requests
673b76
  - JDK-8244205: HTTP/2 tunnel connections through proxy may be reused regardless of which proxy is selected
673b76
  - JDK-8244847: Linux/PPC: runtime/CompressedOops/CompressedClassPointers: smallHeapTest fails
673b76
  - JDK-8245511: G1 adaptive IHOP does not account for reclamation of humongous objects by young GC
673b76
  - JDK-8246274: G1 old gen allocation tracking is not in a separate class
673b76
  - JDK-8247354: [aarch64] PopFrame causes assert(oopDesc::is_oop(obj)) failed: not an oop
673b76
  - JDK-8247408: IdealGraph bit check expression canonicalization
673b76
  - JDK-8247432: Update IANA Language Subtag Registry to Version 2020-09-29
673b76
  - JDK-8247438: JShell: When FailOverExecutionControlProvider fails the proximal cause is not shown
673b76
  - JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns wrong value on Fedora 32
673b76
  - JDK-8248043: Need to eliminate excessive i2l conversions
673b76
  - JDK-8248411: [aarch64] Insufficient error handling when CodeBuffer is exhausted
673b76
  - JDK-8248568: compiler/c2/TestBit.java failed: test missing from stdout/stderr
673b76
  - JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for masked positive values
673b76
  - JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is unstable
673b76
  - JDK-8249189: AARCH64: more L2I conversions can be skipped
673b76
  - JDK-8249719: MethodHandle performance suffers from bad ResolvedMethodTable hash function
673b76
  - JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
673b76
  - JDK-8250635: MethodArityHistogram should use Compile_lock in favour of fancy checks
673b76
  - JDK-8250876: Fix issues with cross-compile on macos
673b76
  - JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean tests fail with hostnames starting from digits
673b76
  - JDK-8251525: AARCH64: Faster Math.signum(fp)
673b76
  - JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
673b76
  - JDK-8252311: AArch64: save two words in itable lookup stub
673b76
  - JDK-8252779: compiler/graalunit/HotspotTest.java failed after 8251525
673b76
  - JDK-8252883: AccessDeniedException caused by delayed file deletion on Windows
673b76
  - JDK-8253167: ARM32 builds fail after JDK-8247910
673b76
  - JDK-8253572: [windows] CDS archive may fail to open with long file names
673b76
  - JDK-8253923: C2 doesn't always run loop opts for compilations that include loops
673b76
  - JDK-8253948: Memory leak in ImageFileReader
673b76
  - JDK-8254631: Better support ALPN byte wire values in SunJSSE
673b76
  - JDK-8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
673b76
  - JDK-8255086: Update the root locale display names
673b76
  - JDK-8255625: AArch64: Implement Base64.encodeBlock accelerator/intrinsic
673b76
  - JDK-8255763: C2: OSR miscompilation caused by invalid memory instruction placement
673b76
  - JDK-8255992: JFR EventWriter does not use first string from StringPool with id 0
673b76
  - JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/PortUnreachable.java fails due to the hard coded threshold is small
673b76
  - JDK-8256244: java/lang/ProcessHandle/PermissionTest.java fails with TestNG 7.1
673b76
  - JDK-8256287: [windows] add loop fuse to map_or_reserve_memory_aligned
673b76
  - JDK-8256523: Streamline Java SHA2 implementation
673b76
  - JDK-8257414: Drag n Drop target area is wrong on high DPI systems
673b76
  - JDK-8257569: Failure observed with JfrVirtualMemory::initialize
673b76
  - JDK-8257574: C2: "failed: parsing found no loops but there are some" assert failure
673b76
  - JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
673b76
  - JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
673b76
  - JDK-8257621: JFR StringPool misses cached items across consecutive recordings
673b76
  - JDK-8257796: [TESTBUG] TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on x86_32
673b76
  - JDK-8257822: C2 crashes with SIGFPE due to a division that floats above its zero check
673b76
  - JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
673b76
  - JDK-8257853: Remove dependencies on JNF's JNI utility functions in AWT and 2D code
673b76
  - JDK-8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
673b76
  - JDK-8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m
673b76
  - JDK-8257988: Remove JNF dependency from libsaproc/MacosxDebuggerLocal.m
673b76
  - JDK-8258414: OldObjectSample events too expensive
673b76
  - JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due to missing UnlockDiagnosticVMOptions
673b76
  - JDK-8258753: StartTlsResponse.close() hangs due to synchronization issues
673b76
  - JDK-8259061: C2: assert(found) failed: memory-writing node is not placed in its original loop or an ancestor of it
673b76
  - JDK-8259227: C2 crashes with SIGFPE due to a division that floats above its zero check
673b76
  - JDK-8259232: Bad JNI lookup during printing
673b76
  - JDK-8259276: C2: Empty expression stack when reexecuting tableswitch/lookupswitch instructions after deoptimization
673b76
  - JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
673b76
  - JDK-8259585: Accessible actions do not work on mac os x
673b76
  - JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
673b76
  - JDK-8259662: Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
673b76
  - JDK-8259710: Inlining trace leaks memory
673b76
  - JDK-8259729: Missed JNFInstanceOf -> IsInstanceOf conversion
673b76
  - JDK-8259777: Incorrect predication condition generated by ADLC
673b76
  - JDK-8259786: initialize last parameter of getpwuid_r
673b76
  - JDK-8259843: initialize dli_fname array before calling dll_address_to_library_name
673b76
  - JDK-8259869: [macOS] Remove desktop module dependencies on JNF Reference APIs
673b76
  - JDK-8259886: Improve SSL session cache performance and scalability
673b76
  - JDK-8259983: do not use uninitialized expand_ms value in G1CollectedHeap::expand_heap_after_young_collection
673b76
  - JDK-8260030: Improve stringStream buffer handling
673b76
  - JDK-8260236: better init AnnotationCollector _contended_group
673b76
  - JDK-8260255: C1: LoopInvariantCodeMotion constructor can leave some fields uninitialized
673b76
  - JDK-8260284: C2: assert(_base == Int) failed: Not an Int
673b76
  - JDK-8260380: Upgrade to LittleCMS 2.12
673b76
  - JDK-8260420: C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint
673b76
  - JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak memory
673b76
  - JDK-8260432: allocateSpaceForGP in freetypeScaler.c might leak memory
673b76
  - JDK-8260616: Removing remaining JNF dependencies in the java.desktop module
673b76
  - JDK-8260653: Unreachable nodes keep speculative types alive
673b76
  - JDK-8260707: java/lang/instrument/PremainClass/InheritAgent0100.java times out
673b76
  - JDK-8260925: HttpsURLConnection does not work  with other JSSE provider.
673b76
  - JDK-8260926: Trace resource exhausted events unconditionally
673b76
  - JDK-8261020: Wrong format parameter in create_emergency_chunk_path
673b76
  - JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
673b76
  - JDK-8261167: print_process_memory_info add a close call after fopen
673b76
  - JDK-8261170: Upgrade to freetype 2.10.4
673b76
  - JDK-8261198: [macOS] Incorrect JNI parameters in number conversion in A11Y code
673b76
  - JDK-8261235: C1 compilation fails with assert(res->vreg_number() == index) failed: conversion check
673b76
  - JDK-8261261: The version extra fields needs to be overridable in jib-profiles.js
673b76
  - JDK-8261262: Kitchensink24HStress.java crashed with EXCEPTION_ACCESS_VIOLATION
673b76
  - JDK-8261354: SIGSEGV at MethodIteratorHost
673b76
  - JDK-8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding
673b76
  - JDK-8261397: try catch Method failing to work when dividing an integer by 0
673b76
  - JDK-8261422: Adjust problematic String.format calls in jdk/internal/util/Preconditions.java outOfBoundsMessage
673b76
  - JDK-8261447: MethodInvocationCounters frequently run into overflow
673b76
  - JDK-8261481: Cannot read Kerberos settings in dynamic store on macOS Big Sur
673b76
  - JDK-8261505: Test test/hotspot/jtreg/gc/parallel/TestDynShrinkHeap.java killed by Linux OOM Killer
673b76
  - JDK-8261601: free memory in early return in Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
673b76
  - JDK-8261649: AArch64: Optimize LSE atomics in C++ code
673b76
  - JDK-8261730: C2 compilation fails with assert(store->find_edge(load) != -1) failed: missing precedence edge
673b76
  - JDK-8261752: Multiple GC test are missing memory requirements
673b76
  - JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c potential leaks
673b76
  - JDK-8261812: C2 compilation fails with assert(!had_error) failed: bad dominance
673b76
  - JDK-8261914: IfNode::fold_compares_helper faces non-canonicalized bool when running JRuby JSON workload
673b76
  - JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java failed "assert(false) failed: unexpected node"
673b76
  - JDK-8262110: DST starts from incorrect time in 2038
673b76
  - JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have line number 0
673b76
  - JDK-8262163: Extend settings printout in jcmd VM.metaspace
673b76
  - JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
673b76
  - JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with assert "bad barrier shape"
673b76
  - JDK-8262446: DragAndDrop hangs on Windows
673b76
  - JDK-8262461: handle wcstombsdmp return value correctly in unix awt_InputMethod.c
673b76
  - JDK-8262465: Very long compilation times and high memory consumption in C2 debug builds
673b76
  - JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt stack
673b76
  - JDK-8262739: String inflation C2 intrinsic prevents insertion of anti-dependencies
673b76
  - JDK-8262829: Native crash in Win32PrintServiceLookup.getAllPrinterNames()
673b76
  - JDK-8262837: handle split_USE correctly
673b76
  - JDK-8262900: ToolBasicTest fails to access HTTP server it starts
673b76
  - JDK-8263260: [s390] Support latest hardware (z14 and z15)
673b76
  - JDK-8263311: Watch registry changes for remote printers update instead of polling
673b76
  - JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB collectors
673b76
  - JDK-8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
673b76
  - JDK-8263425: AArch64: two potential bugs in C1 LIRGenerator::generate_address()
673b76
  - JDK-8263448: CTW: fatal error: meet not symmetric
673b76
  - JDK-8263504: Some OutputMachOpcodes fields are uninitialized
673b76
  - JDK-8263557: Possible NULL dereference in Arena::destruct_contents()
673b76
  - JDK-8263558: Possible NULL dereference in fast path arena free if ZapResourceArea is true
673b76
  - JDK-8263676: AArch64: one potential bug in C1 LIRGenerator::generate_address()
673b76
  - JDK-8263729: [test] divert spurious output away from stream under test in ProcessBuilder Basic test
673b76
  - JDK-8263846: Bad JNI lookup getFocusOwner in accessibility code on Mac OS X
673b76
  - JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg and libawt
673b76
  - JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match rule is not supported
673b76
  - JDK-8264151: ciMethod::ensure_method_data() should return false is loading resulted in empty state
673b76
  - JDK-8264173: [s390] Improve Hardware Feature Detection And Reporting
673b76
  - JDK-8264190: Harden TLS interop tests
673b76
  - JDK-8264223: CodeHeap::verify fails extra_hops assertion in fastdebug test
673b76
  - JDK-8264328: Broken license in javax/swing/JComboBox/8072767/bug8072767.java
673b76
  - JDK-8264360: Loop strip mining verification fails with "should be on the backedge"
673b76
  - JDK-8264626: C1 should be able to inline excluded methods
673b76
  - JDK-8264640: CMS ParScanClosure misses a barrier
673b76
  - JDK-8264786: [macos] All Swing/AWT apps cause Allow Notifications prompt to appear when app is launched
673b76
  - JDK-8264821: DirectIOTest fails on a system with large block size
673b76
  - JDK-8264848: [macos] libjvm.dylib linker warning due to macOS version mismatch
673b76
  - JDK-8264923: PNGImageWriter.write_zTXt throws Exception with a typo
673b76
  - JDK-8264958: C2 compilation fails with assert "n is later than its clone"
673b76
  - JDK-8265099: Revert backport to 11u of 8236859: WebSocket over authenticating proxy fails with NPE
673b76
  - JDK-8265154: vinserti128 operand mix up for KNL platforms
673b76
  - JDK-8265239: Shenandoah: Shenandoah heap region count could be off by 1
673b76
  - JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
673b76
  - JDK-8265421: java/lang/String/StringRepeat.java test is missing a memory requirement
673b76
  - JDK-8265462: Handle multiple slots in the NSS Internal Module from SunPKCS11's Secmod
673b76
  - JDK-8265537: x86 version string truncated after JDK-8249672 11u backport
673b76
  - JDK-8265666: Enable AIX build platform to make external debug symbols
673b76
  - JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work() lacks storestore barrier
673b76
  - JDK-8265690: Use the latest Ubuntu base image version in Docker testing
673b76
  - JDK-8265718: Build failure after JDK-8258414 11u backport
673b76
  - JDK-8265750: Fatal error in safepoint.cpp after backport of 8258414
673b76
  - JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs behind
673b76
  - JDK-8265938: C2's conditional move optimization does not handle top Phi
673b76
  - JDK-8266220: keytool still prompt for store password on a password-less pkcs12 file if -storetype pkcs12 is specified
673b76
  - JDK-8266293: Key protection using PBEWithMD5AndDES fails with "java.security.InvalidAlgorithmParameterException: Salt must be 8 bytes long"
673b76
  - JDK-8266713: [AIX] Build failure after 11u backport of JDK-8247753
673b76
  - JDK-8266802: Shenandoah: Round up region size to page size unconditionally
673b76
  - JDK-8266892: avoid maybe-uninitialized gcc warnings on linux s390x
673b76
  - JDK-8266929: Unable to use algorithms from 3p providers
673b76
  - JDK-8267235: [macos_aarch64] InterpreterRuntime::throw_pending_exception messing up LR results in crash
673b76
  - JDK-8267561: Shenandoah: Reference processing not properly setup for outside of cycle degenerated GC
673b76
  - JDK-8267599: Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u
673b76
  - JDK-8267641: [11u] 8227609 backport typo
673b76
  - JDK-8267721: Enable sun/security/pkcs11 tests for Amazon Linux 2 AArch64
673b76
  - JDK-8268678: LetsEncryptCA.java test fails as Let’s Encrypt Authority X3 is retired
673b76
673b76
Notes on individual issues:
673b76
===========================
673b76
673b76
security-libs/java.security:
673b76
673b76
JDK-8215293: Customizing PKCS12 keystore Generation
673b76
===================================================
673b76
New system and security properties have been added to enable users to
673b76
customize the generation of PKCS #12 keystores. This includes
673b76
algorithms and parameters for key protection, certificate protection,
673b76
and MacData. The detailed explanation and possible values for these
673b76
properties can be found in the "PKCS12 KeyStore properties" section of
673b76
the `java.security` file.
673b76
673b76
Also, support for the following SHA-2 based HmacPBE algorithms has
673b76
been added to the SunJCE provider:
673b76
673b76
* HmacPBESHA224
673b76
* HmacPBESHA256
673b76
* HmacPBESHA384
673b76
* HmacPBESHA512
673b76
* HmacPBESHA512/224
673b76
* HmacPBESHA512/256
673b76
673b76
JDK-8256902: Removed Root Certificates with 1024-bit Keys
673b76
=========================================================
673b76
The following root certificates with weak 1024-bit RSA public keys
673b76
have been removed from the `cacerts` keystore:
673b76
673b76
Alias Name: thawtepremiumserverca [jdk]
673b76
Distinguished Name: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
673b76
673b76
Alias Name: verisignclass2g2ca [jdk]
673b76
Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
673b76
673b76
Alias Name: verisignclass3ca [jdk]
673b76
Distinguished Name: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
673b76
673b76
Alias Name: verisignclass3g2ca [jdk]
673b76
Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
673b76
673b76
Alias Name: verisigntsaca [jdk]
673b76
Distinguished Name: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA
673b76
673b76
JDK-8261361: Removed Telia Company's Sonera Class2 CA certificate
673b76
=================================================================
673b76
673b76
The following root certificate have been removed from the cacerts truststore:
673b76
673b76
Alias Name: soneraclass2ca
673b76
Distinguished Name: CN=Sonera Class2 CA, O=Sonera, C=FI
673b76
673b76
JDK-8242069: Upgraded the Default PKCS12 Encryption and MAC Algorithms
673b76
======================================================================
673b76
The default encryption and MAC algorithms used in a PKCS #12 keystore
673b76
have been updated. The new algorithms are based on AES-256 and SHA-256
673b76
and are stronger than the old algorithms that were based on RC2,
673b76
DESede, and SHA-1. See the security properties starting with
673b76
`keystore.pkcs12` in the `java.security` file for detailed
673b76
information.
673b76
673b76
For compatibility, a new system property named
673b76
`keystore.pkcs12.legacy` is defined that will revert the algorithms to
673b76
use the older, weaker algorithms. There is no value defined for this
673b76
property.
673b76
673b76
security-libs/javax.net.ssl:
673b76
673b76
JDK-8257548: Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values
673b76
=========================================================================================
673b76
Certain TLS ALPN values couldn't be properly read or written by the
673b76
SunJSSE provider. This is due to the choice of Strings as the API
673b76
interface and the undocumented internal use of the UTF-8 Character Set
673b76
which converts characters larger than U+00007F (7-bit ASCII) into
673b76
multi-byte arrays that may not be expected by a peer.
673b76
673b76
ALPN values are now represented using the network byte representation
673b76
expected by the peer, which should require no modification for
673b76
standard 7-bit ASCII-based character Strings. However, SunJSSE now
673b76
encodes/decodes String characters as 8-bit ISO_8859_1/LATIN-1
673b76
characters.  This means applications that used characters above
673b76
U+000007F that were previously encoded using UTF-8 may need to either
673b76
be modified to perform the UTF-8 conversion, or set the Java security
673b76
property `jdk.tls.alpnCharset` to "UTF-8" revert the behavior.
673b76
673b76
See the updated guide at
673b76
https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/alpn.html
673b76
for more information.
673b76
673b76
JDK-8244460: Support for certificate_authorities Extension
673b76
==========================================================
673b76
The "certificate_authorities" extension is an optional extension
673b76
introduced in TLS 1.3. It is used to indicate the certificate
673b76
authorities (CAs) that an endpoint supports and should be used by the
673b76
receiving endpoint to guide certificate selection.
673b76
673b76
With this JDK release, the "certificate_authorities" extension is
673b76
supported for TLS 1.3 in both the client and the server sides.  This
673b76
extension is always present for client certificate selection, while it
673b76
is optional for server certificate selection.
673b76
673b76
Applications can enable this extension for server certificate
673b76
selection by setting the `jdk.tls.client.enableCAExtension` system
673b76
property to `true`.  The default value of the property is `false`.
673b76
673b76
Note that if the client trusts more CAs than the size limit of the
673b76
extension (less than 2^16 bytes), the extension is not enabled.  Also,
673b76
some server implementations do not allow handshake messages to exceed
673b76
2^14 bytes.  Consequently, there may be interoperability issues when
673b76
`jdk.tls.client.enableCAExtension` is set to `true` and the client
673b76
trusts more CAs than the server implementation limit.
673b76
673b76
New in release OpenJDK 11.0.11 (2021-04-20):
673b76
=============================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/openjdk11011
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.11.txt
673b76
673b76
* Security fixes
673b76
  - JDK-8244473: Contextualize registration for JNDI
673b76
  - JDK-8244543: Enhanced handling of abstract classes
673b76
  - JDK-8249906, CVE-2021-2163: Enhance opening JARs
673b76
  - JDK-8250568, CVE-2021-2161: Less ambiguous processing
673b76
  - JDK-8253799: Make lists of normal filenames
673b76
  - JDK-8257001: Improve Http Client Support
673b76
* Other changes
673b76
  - JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream readDouble() conversion to long mishandled
673b76
  - JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection
673b76
  - JDK-8086003: Test fails on OSX with java.lang.RuntimeException 'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3' missing
673b76
  - JDK-8168869: jdeps: localized messages don't use proper line breaks
673b76
  - JDK-8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
673b76
  - JDK-8202343: Disable TLS 1.0 and 1.1
673b76
  - JDK-8205992: jhsdb cannot attach to Java processes running in Docker containers
673b76
  - JDK-8209193: Fix aarch64-linux compilation after -Wreorder changes
673b76
  - JDK-8210413: AArch64: Optimize div/rem by constant in C1
673b76
  - JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
673b76
  - JDK-8211051: jdeps usage of --dot-output doesn't provide valid output for modular jar
673b76
  - JDK-8211057: Gensrc step CompileProperties generates unstable CompilerProperties output
673b76
  - JDK-8211150: G1 Full GC not purging code root memory and hence causing memory leak
673b76
  - JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup delegation when module reads automatic module
673b76
  - JDK-8212043: Add floating-point Math.min/max intrinsics
673b76
  - JDK-8212218: [TESTBUG] runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
673b76
  - JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/WindowsComboBoxSizeTest.java fails in Windows
673b76
  - JDK-8213909: jdeps --print-module-deps should report missing dependences
673b76
  - JDK-8214180: Need better granularity for sleeping
673b76
  - JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed due to missing Lib2 file
673b76
  - JDK-8214230: Classes generated by SystemModulesPlugin.java are not reproducable
673b76
  - JDK-8214741: docs/index.html has no title or copyright
673b76
  - JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed after 8212043
673b76
  - JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003/TestDescription.java fails
673b76
  - JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java failed - no KrbException thrown
673b76
  - JDK-8218550: Add test omitted from JDK-8212043
673b76
  - JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in JvmtiRawMonitor::raw_exit while posting method exit event
673b76
  - JDK-8221995: AARCH64: problems with CAS instructions encoding
673b76
  - JDK-8222518: Remove unnecessary caching of Parker object in java.lang.Thread
673b76
  - JDK-8222785: aarch64: add necessary masking for immediate shift counts
673b76
  - JDK-8223186: HotSpot compile warnings from GCC 9
673b76
  - JDK-8225773: jdeps --check produces NPE if there are missing module dependences
673b76
  - JDK-8225805: Java Access Bridge does not close the logger
673b76
  - JDK-8226810: Failed to launch JVM because of NullPointerException occured on System.props
673b76
  - JDK-8229396: jdeps ignores multi-release when generate-module-info used on command line
673b76
  - JDK-8229474: Shenandoah: Cleanup CM::update_roots()
673b76
  - JDK-8232225: Rework the fix for JDK-8071483
673b76
  - JDK-8232905: JFR fails with assertion: assert(t->unflushed_size() == 0) failed: invariant
673b76
  - JDK-8233164: C2 fails with assert(phase->C->get_alias_index(t) == phase->C->get_alias_index(t_adr)) failed: correct memory chain
673b76
  - JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is failing intermittently in nightly lnux-x64 system
673b76
  - JDK-8233912: aarch64: minor improvements of atomic operations
673b76
  - JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads non-strong fields with an on-strong load barrier
673b76
  - JDK-8234742: Improve handshake logging
673b76
  - JDK-8234796: Refactor Handshake::execute to take a more complex type than ThreadClosure
673b76
  - JDK-8235324: Dying objects are published from users of CollectedHeap::object_iterate
673b76
  - JDK-8235351: Lookup::unreflect should bind with the original caller independent of Method's accessible flag
673b76
  - JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/AttachOnDemand/attach021/TestDescription.java test
673b76
  - JDK-8237392: Shenandoah: Remove unreliable assertion
673b76
  - JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
673b76
  - JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7
673b76
  - JDK-8239355: (dc) Initial value of SO_SNDBUF should allow sending large datagrams (macOS)
673b76
  - JDK-8240353: AArch64: missing support for -XX:+ExtendedDTraceProbes in C1
673b76
  - JDK-8240704: CheckHandles.java failed "AssertionError: Handle use increased by more than 10 percent."
673b76
  - JDK-8240751: Shenandoah: fold ShenandoahTracer definition
673b76
  - JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with "assert(store != load->find_exact_control(load->in(0))) failed: dependence cycle found"
673b76
  - JDK-8241598: Upgrade JLine to 3.14.0
673b76
  - JDK-8241649: Optimize Character.toString
673b76
  - JDK-8241770: Module xxxAnnotation() methods throw NCDFE if module-info.class found as resource in unnamed module
673b76
  - JDK-8241911: AArch64: Fix a potential register clash issue in reduce_add2I
673b76
  - JDK-8242030: Wrong package declarations in jline classes after JDK-8241598
673b76
  - JDK-8242565: Policy initialization issues when the denyAfter constraint is enabled
673b76
  - JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
673b76
  - JDK-8243670: Unexpected test result caused by C2 MergeMemNode::Ideal
673b76
  - JDK-8244088: [Regression] Switch of Gnome theme ends up in deadlocked UI
673b76
  - JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files
673b76
  - JDK-8244340: Handshake processing thread lacks yielding
673b76
  - JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown for malformed class file
673b76
  - JDK-8244683: A TSA server used by tests
673b76
  - JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java failed with No enum constant
673b76
  - JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is unused
673b76
  - JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco agent
673b76
  - JDK-8245512: CRC32 optimization using AVX512 instructions
673b76
  - JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos
673b76
  - JDK-8246707: (sc) SocketChannel.read/write throws AsynchronousCloseException on closed channel
673b76
  - JDK-8246709: sun/security/tools/jarsigner/TsacertOptionTest.java compilation failed after JDK-8244683
673b76
  - JDK-8247200: assert((unsigned)fpargs < 32)
673b76
  - JDK-8247766: [aarch64] guarantee(val < (1U << nbits)) failed: Field too big for insn.
673b76
  - JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
673b76
  - JDK-8248865: Document JNDI/LDAP timeout properties
673b76
  - JDK-8248901: Signed immediate support in .../share/assembler.hpp is broken.
673b76
  - JDK-8249543: Force DirectBufferAllocTest to run with -ExplicitGCInvokesConcurrent
673b76
  - JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
673b76
  - JDK-8249749: modify a primitive array through a stream and a for cycle causes jre crash
673b76
  - JDK-8249787: Make TestGCLocker more resilient with concurrent GCs
673b76
  - JDK-8249867: xml declaration is not followed by a newline
673b76
  - JDK-8250911: [windows] os::pd_map_memory() error detection broken
673b76
  - JDK-8251255: [linux] Add process-memory information to hs-err and VM.info
673b76
  - JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier
673b76
  - JDK-8251925: C2: RenaissanceStressTest fails with assert(!had_error): bad dominance
673b76
  - JDK-8251944: Add Shenandoah test config to compiler/gcbarriers/UnsafeIntrinsicsTest.java
673b76
  - JDK-8251992: VM crashed running TestComplexAddrExpr.java test with -XX:UseAVX=X
673b76
  - JDK-8253220: Epsilon: clean up unused code/declarations
673b76
  - JDK-8253274: The CycleDMImagetest brokes the system
673b76
  - JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
673b76
  - JDK-8253368: TLS connection always receives close_notify exception
673b76
  - JDK-8255368: Math.exp() gives wrong result for large values on x86 32-bit platforms
673b76
  - JDK-8255401: Shenandoah: Allow oldval and newval registers to overlap in cmpxchg_oop()
673b76
  - JDK-8253404: C2: assert(C->live_nodes() <= C->max_node_limit()) failed: Live Node limit exceeded limit
673b76
  - JDK-8253409: Double-rounding possibility in float fma
673b76
  - JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities
673b76
  - JDK-8253524: C2: Refactor code that clones predicates during loop unswitching
673b76
  - JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff)) failed: unexpected
673b76
  - JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/MouseEventAfterStartDragTest.html test failed
673b76
  - JDK-8253702: BigSur version number reported as 10.16, should be 11.nn
673b76
  - JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
673b76
  - JDK-8254104: MethodCounters must exist before nmethod is installed
673b76
  - JDK-8254734: "dead loop detected" assert failure with patch from 8223051
673b76
  - JDK-8254748: Bad Copyright header format after JDK-8212218
673b76
  - JDK-8254799: runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryError.java fails with release VMs
673b76
  - JDK-8255058: C1: assert(is_virtual()) failed: type check
673b76
  - JDK-8255351: Add detection for Graviton 2 CPUs
673b76
  - JDK-8255387: Japanese characters were printed upside down on AIX
673b76
  - JDK-8255479: [aarch64] assert(src->section_index_of(target) == CodeBuffer::SECT_NONE) failed: sanity
673b76
  - JDK-8255544: Create a checked cast
673b76
  - JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI()
673b76
  - JDK-8255681: print callstack in error case in runAWTLoopWithApp
673b76
  - JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
673b76
  - JDK-8255742: PrintInlining as compiler directive doesn't print virtual calls
673b76
  - JDK-8255845: Memory leak in imageFile.cpp
673b76
  - JDK-8255880: UI of Swing components is not redrawn after their internal state changed
673b76
  - JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem
673b76
  - JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset() is incorrect for stub calls
673b76
  - JDK-8256056: Deoptimization stub doesn't save vector registers on x86
673b76
  - JDK-8256061: RegisterSaver::save_live_registers() omits upper halves of ZMM0-15 registers
673b76
  - JDK-8256187: [TEST_BUG] Automate bug4275046.java test
673b76
  - JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after JDK-8210764 due to mishandled lir_neg
673b76
  - JDK-8256258: some missing NULL checks or asserts after CodeCache::find_blob_unsafe
673b76
  - JDK-8256264: Printed GlyphVector outline with low DPI has bad quality on Windows
673b76
  - JDK-8256290: javac/lambda/T8031967.java fails with StackOverflowError on x86_32
673b76
  - JDK-8256359: AArch64: runtime/ReservedStack/ReservedStackTestCompiler.java fails
673b76
  - JDK-8256387: Unexpected result if patching an entire instruction on AArch64
673b76
  - JDK-8256421: Add 2 HARICA roots to cacerts truststore
673b76
  - JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for small copies in StubGenerator::copy_memory
673b76
  - JDK-8256489: Make gtest for long path names on Windows more resilient in the presence of virus scanners
673b76
  - JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2
673b76
  - JDK-8256633: Fix product build on Windows+Arm64
673b76
  - JDK-8256682: JDK-8202343 is incomplete
673b76
  - JDK-8256751: Incremental rebuild with precompiled header fails when touching a header file
673b76
  - JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset() for CallLeafNoFP on x86_32
673b76
  - JDK-8256806: Shenandoah: optimize shenandoah/jni/TestPinnedGarbage.java test
673b76
  - JDK-8256807: C2: Not marking stores correctly as mismatched in string opts
673b76
  - JDK-8256810: Incremental rebuild broken on Macosx
673b76
  - JDK-8256818: SSLSocket that is never bound or connected leaks socket resources
673b76
  - JDK-8256888: Client manual test problem list update
673b76
  - JDK-8257083: Security infra test failures caused by JDK-8202343
673b76
  - JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
673b76
  - JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
673b76
  - JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst.testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps is on
673b76
  - JDK-8257513: C2: assert((constant_addr - _masm.code()->consts()->start()) == con.offset())
673b76
  - JDK-8257547: Handle multiple prereqs on the same line in deps files
673b76
  - JDK-8257561: Some code is not vectorized after 8251925 and 8250607
673b76
  - JDK-8257565: epsilonBarrierSet.hpp should not include barrierSetAssembler
673b76
  - JDK-8257575: C2: "failed: only phis" assert failure in loop strip mining verification
673b76
  - JDK-8257594: C2 compiled checkcast of non-null object triggers endless deoptimization/recompilation cycle
673b76
  - JDK-8257633: Missing -mmacosx-version-min=X flag when linking libjvm
673b76
  - JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java reports leaks
673b76
  - JDK-8257707: Fix incorrect format string in Http1HeaderParser
673b76
  - JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines
673b76
  - JDK-8257798: [PPC64] undefined reference to Klass::vtable_start_offset()
673b76
  - JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java as automatic test
673b76
  - JDK-8257910: [JVMCI] Set exception_seen accordingly in the runtime.
673b76
  - JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884
673b76
  - JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region
673b76
  - JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234
673b76
  - JDK-8258247: Couple of issues in fix for JDK-8249906
673b76
  - JDK-8258373: Update the text handling in the JPasswordField
673b76
  - JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk()
673b76
  - JDK-8258419: RSA cipher buffer cleanup
673b76
  - JDK-8258471: "search codecache" clhsdb command does not work
673b76
  - JDK-8258534: Epsilon: clean up unused includes
673b76
  - JDK-8258805: Japanese characters not entered by mouse click on Windows 10
673b76
  - JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
673b76
  - JDK-8258836: JNI local refs exceed capacity getDiagnosticCommandInfo
673b76
  - JDK-8258884: [TEST_BUG] Convert applet-based test open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java to a regular java test
673b76
  - JDK-8259007: This test printed a blank page
673b76
  - JDK-8259049: Uninitialized variable after JDK-8257513
673b76
  - JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA to false
673b76
  - JDK-8259580: Shenandoah: uninitialized label in VerifyThreadGCState
673b76
  - JDK-8259231: Epsilon: improve performance under contention during virtual space expansion
673b76
  - JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region"
673b76
  - JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days
673b76
  - JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
673b76
  - JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input
673b76
  - JDK-8259428: AlgorithmId.getEncodedParams() should return copy
673b76
  - JDK-8259446: runtime/jni/checked/TestCheckedReleaseArrayElements.java fails with stderr not empty
673b76
  - JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags
673b76
  - JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect
673b76
  - JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543
673b76
  - JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value
673b76
  - JDK-8259707: LDAP channel binding does not work with StartTLS extension
673b76
  - JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
673b76
  - JDK-8259849: Shenandoah: Rename store-val to IU-barrier
673b76
  - JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
673b76
  - JDK-8260029: aarch64: fix typo in verify_oop_array
673b76
  - JDK-8260308: Update LogCompilation junit to 4.13.1
673b76
  - JDK-8260338: Some fields in HaltNode is not cloned
673b76
  - JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS
673b76
  - JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
673b76
  - JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports false positive
673b76
  - JDK-8260497: Shenandoah: Improve SATB flushing
673b76
  - JDK-8260502: [s390] NativeMovRegMem::verify() fails because it's too strict
673b76
  - JDK-8260632: Build failures after JDK-8253353
673b76
  - JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end
673b76
  - JDK-8261022: Fix incorrect result of Math.abs() with char type
673b76
  - JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x
673b76
  - JDK-8261183: Follow on to Make lists of normal filenames
673b76
  - JDK-8261209: isStandalone property: remove dependency on pretty-print
673b76
  - JDK-8261231: Windows IME was disabled after DnD operation
673b76
  - JDK-8261251: Shenandoah: Use object size for full GC humongous compaction
673b76
  - JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined
673b76
  - JDK-8261334: NMT: tuning statistic shows incorrect hash distribution
673b76
  - JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
673b76
  - JDK-8261522: [PPC64] AES intrinsics write beyond the destination array
673b76
  - JDK-8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
673b76
  - JDK-8261585: Restore HandleArea used in Deoptimization::uncommon_trap
673b76
  - JDK-8261753: Test java/lang/System/OsVersionTest.java still failing on BigSur patch versions after JDK-8253702
673b76
  - JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java in 11u
673b76
  - JDK-8261912: Code IfNode::fold_compares_helper more defensively
673b76
  - JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales
673b76
  - JDK-8262018: Wrong format in SAP copyright header of OsVersionTest
673b76
  - JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator
673b76
673b76
Notes on individual issues:
673b76
===========================
673b76
673b76
core-libs/javax.naming:
673b76
673b76
JDK-8258824: LDAP Channel Binding Support for Java GSS/Kerberos
673b76
===============================================================
673b76
A new JNDI environment property "com.sun.jndi.ldap.tls.cbtype" has
673b76
been added to enable TLS Channel Binding data in LDAP authentication
673b76
over SSL/TLS protocol to the Windows AD server.  The only valid value
673b76
at present is "tls-server-end-point", where channel binding data is
673b76
created on the base of the TLS server certificate. See RFC-5929 [0]
673b76
and the module description of the `java.naming` module for further
673b76
details.
673b76
673b76
[0] RFC-5929 "Channel Bindings for TLS": https://www.ietf.org/rfc/rfc5929.txt
673b76
673b76
security-libs/java.security:
673b76
673b76
JDK-8260597: Added 2 HARICA Root CA Certificates
673b76
================================================
673b76
The following root certificates have been added to the cacerts truststore:
673b76
673b76
Alias Name: haricarootca2015
673b76
Distinguished Name: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
673b76
673b76
Alias Name: haricaeccrootca2015
673b76
Distinguished Name: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
673b76
673b76
security-libs/javax.net.ssl:
673b76
673b76
JDK-8256490: Disable TLS 1.0 and 1.1
673b76
====================================
673b76
TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer
673b76
considered secure and have been superseded by more secure and modern
673b76
versions (TLS 1.2 and 1.3).
673b76
673b76
These versions have now been disabled by default. If you encounter
673b76
issues, you can, at your own risk, re-enable the versions by removing
673b76
"TLSv1" and/or "TLSv1.1" from the `jdk.tls.disabledAlgorithms`
673b76
security property in the `java.security` configuration file.
673b76
673b76
tools:
673b76
673b76
JDK-8214213: jdeps --print-module-deps Reports Transitive Dependencies
673b76
======================================================================
673b76
`jdeps --print-module-deps`, `--list-deps`, and `--list-reduce-deps`
673b76
options have been enhanced as follows.
673b76
673b76
1. By default, they perform transitive module dependence analysis on
673b76
libraries on the class path and module path, both directly and
673b76
indirectly, as required by the given input JAR files or
673b76
classes. Previously, they only reported the modules required by the
673b76
given input JAR files or classes.  The `--no-recursive` option can be
673b76
used to request non-transitive dependence analysis.
673b76
673b76
2. By default, they flag any missing dependency, i.e. not found from
673b76
class path and module path, as an error.  The `--ignore-missing-deps`
673b76
option can be used to suppress missing dependence errors. Note that a
673b76
custom image is created with the list of modules output by jdeps when
673b76
using the `--ignore-missing-deps` option for a non-modular
673b76
application. Such an application, running on the custom image, might
673b76
fail at runtime when missing dependence errors are suppressed.
673b76
673b76
xml/jaxp:
673b76
673b76
JDK-8249867 XML declaration is not followed by a newline
673b76
========================================================
673b76
673b76
The DOM Load and Save `LSSerializer` does not have an explicit control
673b76
for whether or not the XML Declaration ends with a newline. In this
673b76
release, a JDK implementation specific property
673b76
`http://www.oracle.com/xml/jaxp/properties/isStandalone` and
673b76
corresponding System property `jdk.xml.isStandalone` are added to
673b76
control the addition of a newline and act independently without
673b76
having to set the pretty-print property. This property can be used to
673b76
reverse the incompatible change introduced in Java SE 7 Update 4 with
673b76
an update of Xalan 2.7.1 where a newline is omitted when pretty-print
673b76
is required.
673b76
673b76
For details, please refer to the bug report and the java.xml module-summary.
673b76
673b76
Usage:
673b76
673b76
// to set the property, get an instance of LSSerializer and set it along with pretty-print
673b76
LSSerializer ser = impl.createLSSerializer();
673b76
ser.getDomConfig().setParameter("format-pretty-print", true);
673b76
ser.getDomConfig().setParameter("http://www.oracle.com/xml/jaxp/properties/isStandalone", true);
673b76
673b76
// to use the System property, set it before initializing a LSSerializer
673b76
System.setProperty("jdk.xml.isStandalone", “true”);
673b76
673b76
// to clear the property, place the line anywhere after the LSSerializer is initialized
673b76
System.clearProperty("jdk.xml.isStandalone");
673b76
673b76
New in release OpenJDK 11.0.10 (2021-01-19):
673b76
=============================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/openjdk11010
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt
673b76
673b76
* Security fixes
673b76
  - JDK-8247619: Improve Direct Buffering of Characters
673b76
* Other changes
673b76
  - JDK-6722928: Support SSPI as a native GSS-API provider
673b76
  - JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
673b76
  - JDK-8152332: [macosx] JFileChooser cannot be serialized on Mac OS X
673b76
  - JDK-8161684: [testconf] Add VerifyOops' testing into compiler tiers
673b76
  - JDK-8171279: Support X25519 and X448 in TLS
673b76
  - JDK-8173361: various crashes in JvmtiExport::post_compiled_method_load
673b76
  - JDK-8173658: JvmtiExport::post_class_unload() is broken for non-JavaThread initiators
673b76
  - JDK-8191006: hsdis disassembler plugin does not compile with binutils 2.29+
673b76
  - JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
673b76
  - JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode
673b76
  - JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
673b76
  - JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
673b76
  - JDK-8208483: Add 5 JNDI tests to com/sun/jndi/dns/FactoryTests/
673b76
  - JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
673b76
  - JDK-8208665: Amend cross-compilation docs with qemu-debootstrap recipe
673b76
  - JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
673b76
  - JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
673b76
  - JDK-8211450: UndetVar::dup is not copying the kind field to the duplicated instance
673b76
  - JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL) failed: resolving NULL _value"
673b76
  - JDK-8212226: SurfaceManager throws "Invalid Image variant" for MultiResolutionImage (Windows)
673b76
  - JDK-8213400: Support choosing group name in keytool keypair generation
673b76
  - JDK-8213535: Windows HiDPI html lightweight tooltips are truncated
673b76
  - JDK-8213698: Improve devkit creation and add support for linux/ppc64/ppc64le/s390x
673b76
  - JDK-8214025: assert(t->singleton()) failed: must be a constant when ScavengeRootsInCode < 2
673b76
  - JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java fails because of missing UnlockDiagnosticVMOptions
673b76
  - JDK-8214787: Zero builds fail with "undefined JavaThread::thread_state()"
673b76
  - JDK-8215583: Exclude runtime/handshake/HandshakeWalkSuspendExitTest.java
673b76
  - JDK-8216012: Infinite loop in RSA KeyPairGenerator
673b76
  - JDK-8216324: GetClassMethods is confused by the presence of default methods in super interfaces
673b76
  - JDK-8217429: WebSocket over authenticating proxy fails to send Upgrade headers
673b76
  - JDK-8217976: test/jdk/java/net/httpclient/websocket/WebSocketProxyTest.java fails intermittently
673b76
  - JDK-8218021: Have jarsigner preserve posix permission attributes
673b76
  - JDK-8218287: jshell tool: input behavior unstable after 12-ea+24 on Windows
673b76
  - JDK-8218851: JVM crash in custom classloader stress test, JDK 12 & 13
673b76
  - JDK-8220420: Cleanup c1_LinearScan
673b76
  - JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad events to wrong jvmtiEnv
673b76
  - JDK-8222286: Fix for JDK-8213419 is broken on s390
673b76
  - JDK-8222527: HttpClient doesn't send HOST header when tunelling HTTP/1.1 through http proxy
673b76
  - JDK-8222533: jtreg test jdk/internal/platform/cgroup/TestCgroupMetrics.java fails on SLES12.3 linux ppc64le machine
673b76
  - JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails with exitValue = 137
673b76
  - JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/tc02t001/TestDescription.java failed
673b76
  - JDK-8224650: Add tests to support X25519 and X448 in TLS
673b76
  - JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs
673b76
  - JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash during initialization on Windows platforms
673b76
  - JDK-8225687: Newly added sspi.cpp in JDK-6722928 still contains some small errors
673b76
  - JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100
673b76
  - JDK-8227275: Within native OOM error handling, assertions may hang the process
673b76
  - JDK-8227647: [Graal] Test8009761.java fails due to "RuntimeException: static java.lang.Object compiler.uncommontrap.Test8009761.m3(boolean,boolean) not compiled"
673b76
  - JDK-8229495: SIGILL in C2 generated OSR compilation
673b76
  - JDK-8230910: libsspi_bridge does not build on Windows 32bit
673b76
  - JDK-8232114: JVM crashed at imjpapi.dll in native code
673b76
  - JDK-8234147: Avoid looking up standard charsets in core libraries
673b76
  - JDK-8234393: [macos] printing ignores printer tray
673b76
  - JDK-8234863: Increase default value of MaxInlineLevel
673b76
  - JDK-8235218: Minimal VM is broken after JDK-8173361
673b76
  - JDK-8235456: Minimal VM is broken after JDK-8212160
673b76
  - JDK-8235829: graal crashes with Zombie.java test
673b76
  - JDK-8236124: Minimal VM slowdebug build failed after JDK-8212160
673b76
  - JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
673b76
  - JDK-8236944: The legVecZ operand should be limited to zmm0-zmm15 registers
673b76
  - JDK-8237186: Fix typo in copyright header of java/io/Reader/TransferTo.java
673b76
  - JDK-8237499: JFR: Include stack trace in the ThreadStart event
673b76
  - JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
673b76
  - JDK-8237524: AArch64: String.compareTo() may return incorrect result
673b76
  - JDK-8237950: C2 compilation fails with "Live Node limit exceeded limit" during ConvI2L::Ideal optimization
673b76
  - JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read
673b76
  - JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test
673b76
  - JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails -XX:+VerifyOops with "verify_oop: rsi: broken oop"
673b76
  - JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&)
673b76
  - JDK-8239886: Minimal VM build fails after JDK-8237499
673b76
  - JDK-8240633: Memory leaks in the implementations of FileChooserUI
673b76
  - JDK-8240690: Race condition between EDT and BasicDirectoryModel.FilesLoader.run0()
673b76
  - JDK-8241234: Unify monitor enter/exit runtime entries.
673b76
  - JDK-8241311: Move some charset mapping tests from closed to open
673b76
  - JDK-8241797: Add some tests to the problem list
673b76
  - JDK-8242029: AArch64: skip G1 array copy pre-barrier if marking not active
673b76
  - JDK-8242335: Additional Tests for RSASSA-PSS
673b76
  - JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker
673b76
  - JDK-8242614: cleanup duplicated test ldap server in some com/sun/jndi/ldap/ tests
673b76
  - JDK-8242846: Bring back test/jdk/tools/jlink/plugins/OrderResourcesPluginTest.java
673b76
  - JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
673b76
  - JDK-8243290: Improve diagnostic messages for class verification and redefinition failures
673b76
  - JDK-8243488: Add tests for set/get SendBufferSize and getReceiveBufferSize in DatagramSocket
673b76
  - JDK-8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA
673b76
  - JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test uses wrong class
673b76
  - JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java test misses -version
673b76
  - JDK-8244142: some hotspot/runtime tests don't check exit code of forked JVM
673b76
  - JDK-8244278: Excessive code cache flushes and sweeps
673b76
  - JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/Test8237524.java fails with --illegal-access=deny
673b76
  - JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building with Xcode 11
673b76
  - JDK-8244819: hsdis does not compile with binutils 2.34+
673b76
  - JDK-8245051: c1 is broken if it is compiled by gcc without -fno-lifetime-dse
673b76
  - JDK-8245168: jlink should not be treated as a "small" tool
673b76
  - JDK-8245400: Upgrade to LittleCMS 2.11
673b76
  - JDK-8246381: VM crashes with "Current BasicObjectLock* below than low_mark"
673b76
  - JDK-8246434: Threads::print_on_error assumes that the heap has been set up
673b76
  - JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480
673b76
  - JDK-8247201: Print potential pointer value of readable stack memory in hs_err file
673b76
  - JDK-8247763: assert(outer->outcnt() == 2) failed: 'only phis' failure in LoopNode::verify_strip_mined()
673b76
  - JDK-8247867: Upgrade to freetype 2.10.2
673b76
  - JDK-8248190: Enable Power10 system and implement new byte-reverse instructions
673b76
  - JDK-8248226: TestCloneAccessStressGCM fails with -XX:-ReduceBulkZeroing
673b76
  - JDK-8248347: windows build broken by JDK-8243114
673b76
  - JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
673b76
  - JDK-8248552: C2 crashes with SIGFPE due to division by zero
673b76
  - JDK-8248596: [TESTBUG] compiler/loopopts/PartialPeelingUnswitch.java times out with Graal enabled
673b76
  - JDK-8248745: Add jarsigner and keytool tests for restricted algorithms
673b76
  - JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
673b76
  - JDK-8248845: AArch64: stack corruption after spilling vector register
673b76
  - JDK-8249176: Update GlobalSignR6CA test certificates
673b76
  - JDK-8249183: JVM crash in "AwtFrame::WmSize" method
673b76
  - JDK-8249192: MonitorInfo stores raw oops across safepoints
673b76
  - JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions allowed
673b76
  - JDK-8249603: C1: assert(has_error == false) failed: register allocation invalid
673b76
  - JDK-8249605: C2: assert(no_dead_loop) failed: dead loop detected
673b76
  - JDK-8249607: C2: assert(!had_error) failed: bad dominance
673b76
  - JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint
673b76
  - JDK-8249672: Include microcode revision in features_string on x86
673b76
  - JDK-8249748: gtest silently ignores bad jvm arguments
673b76
  - JDK-8249821: Separate libharfbuzz from libfontmanager
673b76
  - JDK-8250598: Hyper-V is detected in spite of running on host OS
673b76
  - JDK-8250605: Linux x86_32 builds fail after JDK-8249821
673b76
  - JDK-8250636: iso8601_time returns incorrect offset part on MacOS
673b76
  - JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY
673b76
  - JDK-8250772: Test com/sun/jndi/ldap/NamingExceptionMessageTest.java fails intermittently with javax.naming.ServiceUnavailableException
673b76
  - JDK-8250825: C2 crashes with assert(field != __null) failed: missing field
673b76
  - JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz
673b76
  - JDK-8250928: JFR: Improve hash algorithm for stack traces
673b76
  - JDK-8250968: Symlinks attributes not preserved when using jarsigner on zip files
673b76
  - JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
673b76
  - JDK-8251118: BiasedLocking::preserve_marks should not have a HandleMark
673b76
  - JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java failed due to timeout
673b76
  - JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes target VM
673b76
  - JDK-8251365: Build failure on AIX after 8250636
673b76
  - JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
673b76
  - JDK-8251456: [TESTBUG] compiler/vectorization/TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
673b76
  - JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
673b76
  - JDK-8251535: Partial peeling at unsigned test adds incorrect loop exit check
673b76
  - JDK-8251949: ZGC: Set explicit heap size for compiler/gcbarriers tests
673b76
  - JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9)
673b76
  - JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
673b76
  - JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
673b76
  - JDK-8252497: Incorrect numeric currency code for ROL
673b76
  - JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
673b76
  - JDK-8252679: Two windows specific FileDIalog tests may fail on some Windows_Server_2016_Standard
673b76
  - JDK-8252696: Loop unswitching may cause out of bound array load to be executed
673b76
  - JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
673b76
  - JDK-8253219: Epsilon: clean up unnecessary includes
673b76
  - JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
673b76
  - JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
673b76
  - JDK-8253269: The CheckCommonColors test should provide more info on failure
673b76
  - JDK-8253284: Zero OrderAccess barrier mappings are incorrect
673b76
  - JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
673b76
  - JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
673b76
  - JDK-8253791: Issue with useAppleColor check in CSystemColors.m
673b76
  - JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
673b76
  - JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
673b76
  - JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
673b76
  - JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp
673b76
  - JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
673b76
  - JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
673b76
  - JDK-8254190: [s390] interpreter misses exception check after calling monitorenter
673b76
  - JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
673b76
  - JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
673b76
  - JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
673b76
  - JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
673b76
  - JDK-8255065: Zero: accessor_entry misses the IRIW case
673b76
  - JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
673b76
  - JDK-8255269: Unsigned overflow in g1Policy.cpp
673b76
  - JDK-8255365: Problem list failing client manual tests
673b76
  - JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
673b76
  - JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
673b76
  - JDK-8255550: x86: Assembler::cmpq(Address dst, Register src) encoding is incorrect
673b76
  - JDK-8255603: Memory/Performance regression after JDK-8210985
673b76
  - JDK-8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback
673b76
  - JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/StreamFlush.java
673b76
  - JDK-8256427: Test com/sun/jndi/dns/ConfigTests/PortUnreachable.java does not work on AIX
673b76
  - JDK-8256452: Integrate missing part of JDK-8232370 to 11u
673b76
  - JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/libOverpassMethods.c fails to compile on gcc 4.4.x
673b76
  - JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to -Wl,-z,defs
673b76
  - JDK-8256618: Zero: Linux x86_32 build still fails
673b76
  - JDK-8256736: Zero: GTest tests fail with "unsuppported vm variant"
673b76
  - JDK-8256809: Annotation processing causes NPE during flow analysis
673b76
  - JDK-8257181: s390x builds are very noisy with gc-sections messages
673b76
  - JDK-8257242: [macOS] Java app crashes while switching input methods
673b76
  - JDK-8257545: SunJSSE FIPS regression in key exchange after JDK-8171279 11u backport
673b76
  - JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false
673b76
  - JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays
673b76
  - JDK-8258630: Add expiry exception for QuoVadis root certificate
673b76
673b76
Notes on individual issues:
673b76
===========================
673b76
673b76
security-libs/java.security:
673b76
673b76
JDK-8213821: -groupname Option Added to keytool Key Pair Generation
673b76
===================================================================
673b76
A new `-groupname` option has been added to `keytool -genkeypair` so
673b76
that a user can specify a named group when generating a key pair. For
673b76
example, `keytool -genkeypair -keyalg EC -groupname secp384r1` will
673b76
generate an EC key pair by using the `secp384r1` curve. Because there
673b76
might be multiple curves with the same size, using the `-groupname`
673b76
option is preferred over the `-keysize` option.
673b76
673b76
JDK-8248263: jarsigner Preserves POSIX File Permission and symlink Attributes
673b76
=============================================================================
673b76
When signing a file that contains POSIX file permission or symlink
673b76
attributes, `jarsigner` now preserves these attributes in the newly
673b76
signed file but warns that these attributes are unsigned and not
673b76
protected by the signature. The same warning is printed during the
673b76
`jarsigner -verify` operation for such files.
673b76
673b76
Note that the `jar` tool does not read/write these attributes. This
673b76
change is more visible to tools like `unzip` where these attributes
673b76
are preserved.
673b76
673b76
security-libs/javax.net.ssl:
673b76
673b76
JDK-8225764:  Support for X25519 and X448 in TLS
673b76
================================================
673b76
673b76
The named elliptic curve groups `x25519` and `x448` are now available
673b76
for JSSE key agreement in TLS versions 1.0 to 1.3, with `x25519` being
673b76
the most preferred of the default enabled named groups.  The default
673b76
ordered list is now:
673b76
673b76
* x25519
673b76
* secp256r1
673b76
* secp384r1
673b76
* secp521r1
673b76
* x448
673b76
* secp256k1
673b76
* ffdhe2048
673b76
* ffdhe3072
673b76
* ffdhe4096
673b76
* ffdhe6144
673b76
* ffdhe8192
673b76
673b76
The default list can be overridden using the system property *`jdk.tls.namedGroups`*.
673b76
673b76
security-libs/org.ietf.jgss:
673b76
673b76
JDK-8214079: Added a Default Native GSS-API Library on Windows
673b76
==============================================================
673b76
A native GSS-API library has been added to JDK on the Windows
673b76
platform. The library is client-side only and uses the default
673b76
credentials. It will be loaded when the `sun.security.jgss.native`
673b76
system property is set to "true". A user can still load a third-party
673b76
native GSS-API library by setting the system property
673b76
`sun.security.jgss.lib` to its path.
673b76
673b76
New in release OpenJDK 11.0.9.1 (2020-10-20):
673b76
=============================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/openjdk11091
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.1.txt
673b76
673b76
* Regression fixes
673b76
  - JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
673b76
673b76
New in release OpenJDK 11.0.9 (2020-10-20):
673b76
===========================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/openjdk1109
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt
673b76
673b76
* Security fixes
673b76
  - JDK-8233624: Enhance JNI linkage
673b76
  - JDK-8236196: Improve string pooling
673b76
  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
673b76
  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
673b76
  - JDK-8237995, CVE-2020-14782: Enhance certificate processing
673b76
  - JDK-8240124: Better VM Interning
673b76
  - JDK-8241114, CVE-2020-14792: Better range handling
673b76
  - JDK-8242680, CVE-2020-14796: Improved URI Support
673b76
  - JDK-8242685, CVE-2020-14797: Better Path Validation
673b76
  - JDK-8242695, CVE-2020-14798: Enhanced buffer support
673b76
  - JDK-8243302: Advanced class supports
673b76
  - JDK-8244136, CVE-2020-14803: Improved Buffer supports
673b76
  - JDK-8244479: Further constrain certificates
673b76
  - JDK-8244955: Additional Fix for JDK-8240124
673b76
  - JDK-8245407: Enhance zoning of times
673b76
  - JDK-8245412: Better class definitions
673b76
  - JDK-8245417: Improve certificate chain handling
673b76
  - JDK-8248574: Improve jpeg processing
673b76
  - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
673b76
  - JDK-8253019: Enhanced JPEG decoding
673b76
* Other changes
673b76
  - JDK-6532025: GIF reader throws misleading exception with truncated images
673b76
  - JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/PDialogTest.java needs update by removing a infinite loop
673b76
  - JDK-8022535: [TEST BUG] javax/swing/text/html/parser/Test8017492.java fails
673b76
  - JDK-8062947: Fix exception message to correctly represent LDAP connection failure
673b76
  - JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
673b76
  - JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/CloseServerSocket.java fails intermittently with Address already in use
673b76
  - JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect
673b76
  - JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider
673b76
  - JDK-8172404: Tools should warn if weak algorithms are used before restricting them
673b76
  - JDK-8193367: Annotated type variable bounds crash javac
673b76
  - JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset
673b76
  - JDK-8203026: java.rmi.NoSuchObjectException: no such object in table
673b76
  - JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called
673b76
  - JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass
673b76
  - JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout
673b76
  - JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java
673b76
  - JDK-8204963: javax.swing.border.TitledBorder has a memory leak
673b76
  - JDK-8204994: SA might fail to attach to process with "Windbg Error: WaitForEvent failed"
673b76
  - JDK-8205534: Remove SymbolTable dependency from serviceability agent
673b76
  - JDK-8206309: Tier1 SA tests fail
673b76
  - JDK-8208281: java/nio/channels/AsynchronousSocketChannel/Basic.java timed out
673b76
  - JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1
673b76
  - JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect
673b76
  - JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent!
673b76
  - JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful
673b76
  - JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
673b76
  - JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
673b76
  - JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
673b76
  - JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
673b76
  - JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code
673b76
  - JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
673b76
  - JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
673b76
  - JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
673b76
  - JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
673b76
  - JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout
673b76
  - JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
673b76
  - JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
673b76
  - JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
673b76
  - JDK-8211694: JShell: Redeclared variable should be reset
673b76
  - JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent
673b76
  - JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest
673b76
  - JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55
673b76
  - JDK-8212807: tools/jar/multiRelease/Basic.java times out
673b76
  - JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
673b76
  - JDK-8213214: Set -Djava.io.tmpdir= when running tests
673b76
  - JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found
673b76
  - JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
673b76
  - JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
673b76
  - JDK-8214074: Ghash optimization using AVX instructions
673b76
  - JDK-8214491: Upgrade to JLine 3.9.0
673b76
  - JDK-8214797: TestJmapCoreMetaspace.java timed out
673b76
  - JDK-8215243: JShell tests failing intermitently with \"Problem cleaning up the following threads:\"
673b76
  - JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
673b76
  - JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
673b76
  - JDK-8215438: jshell tool: Ctrl-D causes EOF
673b76
  - JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows
673b76
  - JDK-8216974: HttpConnection not returned to the pool after 204 response
673b76
  - JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time
673b76
  - JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
673b76
  - JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
673b76
  - JDK-8221658: aarch64: add necessary predicate for ubfx patterns
673b76
  - JDK-8221759: Crash when completing \"java.io.File.path\"
673b76
  - JDK-8221918: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails: Shared archive not found
673b76
  - JDK-8222074: Enhance auto vectorization for x86
673b76
  - JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp
673b76
  - JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command
673b76
  - JDK-8223688: JShell: crash on the instantiation of raw anonymous class
673b76
  - JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error
673b76
  - JDK-8223940: Private key not supported by chosen signature algorithm
673b76
  - JDK-8224184: jshell got IOException at exiting with AIX
673b76
  - JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc
673b76
  - JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException
673b76
  - JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions
673b76
  - JDK-8226536: Catch OOM from deopt that fails rematerializing objects
673b76
  - JDK-8226575: OperatingSystemMXBean should be made container aware
673b76
  - JDK-8226697: Several tests which need the @key headful keyword are missing it.
673b76
  - JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous
673b76
  - JDK-8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
673b76
  - JDK-8227269: Slow class loading when running with JDWP
673b76
  - JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
673b76
  - JDK-8228448: Jconsole can't connect to itself
673b76
  - JDK-8228967: Trust/Key store and SSL context utilities for tests
673b76
  - JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
673b76
  - JDK-8229815: Upgrade Jline to 3.12.1
673b76
  - JDK-8230000: some httpclients testng tests run zero test
673b76
  - JDK-8230002: javax/xml/jaxp/unittest/transform/SecureProcessingTest.java runs zero test
673b76
  - JDK-8230010: Remove jdk8037819/BasicTest1.java
673b76
  - JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter
673b76
  - JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
673b76
  - JDK-8230767: FlightRecorderListener returns null recording
673b76
  - JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
673b76
  - JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
673b76
  - JDK-8231586: enlarge encoding space for OopMapValue offsets
673b76
  - JDK-8231953: Wrong assumption in assertion in oop::register_oop
673b76
  - JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes
673b76
  - JDK-8232083: Minimal VM is broken after JDK-8231586
673b76
  - JDK-8232161: Align some one-way conversion in MS950 charset with Windows
673b76
  - JDK-8232855: jshell missing word in /help help
673b76
  - JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration
673b76
  - JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
673b76
  - JDK-8233386: Initialize NULL fields for unused decorations
673b76
  - JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
673b76
  - JDK-8233686: XML transformer uses excessive amount of memory
673b76
  - JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions
673b76
  - JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment
673b76
  - JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
673b76
  - JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
673b76
  - JDK-8234058: runtime/CompressedOops/CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
673b76
  - JDK-8234149: Several regression tests do not dispose Frame at end
673b76
  - JDK-8234347: "Turkey" meta time zone does not generate composed localized names
673b76
  - JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/bug6980209.java fails in linux nightly
673b76
  - JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC
673b76
  - JDK-8234541: C1 emits an empty message when it inlines successfully
673b76
  - JDK-8234687: change javap reporting on unknown attributes
673b76
  - JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
673b76
  - JDK-8236548: Localized time zone name inconsistency between English and other locales
673b76
  - JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
673b76
  - JDK-8237182: Update copyright header for shenandoah and epsilon files
673b76
  - JDK-8237888: security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
673b76
  - JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
673b76
  - JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
673b76
  - JDK-8238284: [macos] Zero VM build fails due to an obvious typo
673b76
  - JDK-8238380: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10
673b76
  - JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c "multiple definition" link errors with GCC10
673b76
  - JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10
673b76
  - JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
673b76
  - JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
673b76
  - JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), "should be non-static concrete method");
673b76
  - JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
673b76
  - JDK-8240169: javadoc fails to link to non-modular api docs
673b76
  - JDK-8240295: hs_err elapsed time in seconds is not accurate enough
673b76
  - JDK-8240360: NativeLibraryEvent has wrong library name on Linux
673b76
  - JDK-8240676: Meet not symmetric failure when running lucene on jdk8
673b76
  - JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
673b76
  - JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
673b76
  - JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows
673b76
  - JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException
673b76
  - JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
673b76
  - JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
673b76
  - JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME
673b76
  - JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
673b76
  - JDK-8241750: x86_32 build failure after JDK-8227269
673b76
  - JDK-8242184: CRL generation error with RSASSA-PSS
673b76
  - JDK-8242283: Can't start JVM when java home path includes non-ASCII character
673b76
  - JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
673b76
  - JDK-8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
673b76
  - JDK-8243138: Enhance BaseLdapServer to support starttls extended request
673b76
  - JDK-8243320: Add SSL root certificates to Oracle Root CA program
673b76
  - JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
673b76
  - JDK-8243389: enhance os::pd_print_cpu_info on linux
673b76
  - JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment
673b76
  - JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
673b76
  - JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions
673b76
  - JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows)
673b76
  - JDK-8244087: 2020-04-24 public suffix list update
673b76
  - JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26
673b76
  - JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base
673b76
  - JDK-8244196: adjust output in os_linux
673b76
  - JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in
673b76
  - JDK-8244287: JFR: Methods samples have line number 0
673b76
  - JDK-8244703: "platform encoding not initialized" exceptions with debugger, JNI
673b76
  - JDK-8244719: CTW: C2 compilation fails with "assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it"
673b76
  - JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb
673b76
  - JDK-8244763: Update --release 8 symbol information after JSR 337 MR3
673b76
  - JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor
673b76
  - JDK-8245151: jarsigner should not raise duplicate warnings on verification
673b76
  - JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
673b76
  - JDK-8245714: "Bad graph detected in build_loop_late" when loads are pinned on loop limit check uncommon branch
673b76
  - JDK-8245801: StressRecompilation triggers assert "redundunt OSR recompilation detected. memory leak in CodeCache!"
673b76
  - JDK-8245832: JDK build make-static-libs should build all JDK libraries
673b76
  - JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan
673b76
  - JDK-8245981: Upgrade to jQuery 3.5.1
673b76
  - JDK-8246027: Minimal fastdebug build broken after JDK-8245801
673b76
  - JDK-8246094: [macos] Sound Recording and playback is not working
673b76
  - JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode
673b76
  - JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
673b76
  - JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError
673b76
  - JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
673b76
  - JDK-8246330: Add TLS Tests for Legacy ECDSA curves
673b76
  - JDK-8246453: TestClone crashes with "all collected exceptions must come from the same place"
673b76
  - JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods
673b76
  - JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node
673b76
  - JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code
673b76
  - JDK-8247615: Initialize the bytes left for the heap sampler
673b76
  - JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand
673b76
  - JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&'
673b76
  - JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
673b76
  - JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention
673b76
  - JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
673b76
  - JDK-8248348: Regression caused by the update to BCEL 6.0
673b76
  - JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1
673b76
  - JDK-8248495: [macos] zerovm is broken due to libffi headers location
673b76
  - JDK-8248851: CMS: Missing memory fences between free chunk check and klass read
673b76
  - JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows
673b76
  - JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650
673b76
  - JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.
673b76
  - JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel
673b76
  - JDK-8249255: Build fails if source code in cygwin home dir
673b76
  - JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
673b76
  - JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList
673b76
  - JDK-8249560: Shenandoah: Fix racy GC request handling
673b76
  - JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
673b76
  - JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
673b76
  - JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
673b76
  - JDK-8250609: C2 crash in IfNode::fold_compares
673b76
  - JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics
673b76
  - JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
673b76
  - JDK-8250787: Provider.put no longer registering aliases in FIPS env
673b76
  - JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM
673b76
  - JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk
673b76
  - JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds
673b76
  - JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
673b76
  - JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure
673b76
  - JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
673b76
  - JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
673b76
  - JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase
673b76
  - JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
673b76
  - JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility
673b76
  - JDK-8252258: [11u] JDK-8242154 changes the default vendor
673b76
  - JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011
673b76
  - JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11
673b76
  - JDK-8253283: [11u] Test build/translations/VerifyTranslations.java failing after JDK-8252258
673b76
  - JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
673b76
673b76
Notes on individual issues:
673b76
===========================
673b76
673b76
core-libs/java.nio.charsets:
673b76
673b76
JDK-8240196: Modified the MS950 charset Encoder's Conversion Table
673b76
==================================================================
673b76
In this release, some of the one-way byte-to-char mappings have been
673b76
aligned with the preferred mappings provided by the Unicode Consortium
673b76
(https://unicode.org/Public/MAPPINGS/VENDORS/MICSFT/WindowsBestFit/bestfit950.txt).
673b76
673b76
core-libs/java.util:i18n:
673b76
673b76
JDK-8238914: Localized Time Zone Name Inconsistency Between English and Other Locales
673b76
=====================================================================================
673b76
English time zone names provided by the CLDR locale provider are now
673b76
correctly synthesized following the CLDR spec, rather than substituted
673b76
from the COMPAT provider. For example, SHORT style names are no longer
673b76
synthesized abbreviations of LONG style names, but instead produce GMT
673b76
offset formats.
673b76
673b76
core-svc/java.lang.management:
673b76
673b76
JDK-8236876: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data
673b76
============================================================================================
673b76
When executing in a container, or other virtualized operating
673b76
environment, the following `OperatingSystemMXBean` methods in this
673b76
release return container specific information, if
673b76
available. Otherwise, they return host specific data:
673b76
673b76
* getFreePhysicalMemorySize()
673b76
* getTotalPhysicalMemorySize()
673b76
* getFreeSwapSpaceSize()
673b76
* getTotalSwapSpaceSize()
673b76
* getSystemCpuLoad()
673b76
673b76
security-libs/java.security:
673b76
673b76
JDK-8250756: Added Entrust Root Certification Authority - G4 certificate
673b76
========================================================================
673b76
The Entrust root certificate has been added to the cacerts truststore:
673b76
673b76
Alias Name: entrustrootcag4
673b76
Distinguished Name: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,  Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
673b76
673b76
JDK-8250860: Added 3 SSL Corporation Root CA Certificates
673b76
=========================================================
673b76
The following root certificates have been added to the cacerts truststore for the SSL Corporation:
673b76
673b76
Alias Name: sslrootrsaca
673b76
Distinguished Name: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
673b76
673b76
Alias Name: sslrootevrsaca
673b76
Distinguished Name: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
673b76
673b76
Alias Name: sslrooteccca
673b76
Distinguished Name: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
673b76
673b76
JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default
673b76
===================================================================================
673b76
Weak named curves are disabled by default by adding them to the
673b76
following `disabledAlgorithms` security properties:
673b76
673b76
* jdk.tls.disabledAlgorithms
673b76
* jdk.certpath.disabledAlgorithms
673b76
* jdk.jar.disabledAlgorithms
673b76
673b76
Red Hat has always disabled many of the curves provided by upstream,
673b76
so the only addition in this release is:
673b76
673b76
* secp256k1
673b76
673b76
The curves that remain enabled are:
673b76
673b76
* secp256r1
673b76
* secp384r1
673b76
* secp521r1
673b76
* X25519
673b76
* X448
673b76
673b76
When large numbers of weak named curves need to be disabled, adding
673b76
individual named curves to each `disabledAlgorithms` property would be
673b76
overwhelming. To relieve this, a new security property,
673b76
`jdk.disabled.namedCurves`, is implemented that can list the named
673b76
curves common to all of the `disabledAlgorithms` properties. To use
673b76
the new property in the `disabledAlgorithms` properties, precede the
673b76
full property name with the keyword `include`.  Users can still add
673b76
individual named curves to `disabledAlgorithms` properties separate
673b76
from this new property.  No other properties can be included in the
673b76
`disabledAlgorithms` properties.
673b76
673b76
To restore the named curves, remove the `include
673b76
jdk.disabled.namedCurves` either from specific or from all
673b76
`disabledAlgorithms` security properties. To restore one or more
673b76
curves, remove the specific named curve(s) from the
673b76
`jdk.disabled.namedCurves` property.
673b76
673b76
JDK-8244286: Tools Warn If Weak Algorithms Are Used Before Restricting Them
673b76
===========================================================================
673b76
The `keytool` and `jarsigner` tools have been updated to warn users
673b76
about weak cryptographic algorithms being used before they are
673b76
disabled. In this release, the tools issue warnings for the SHA-1 hash
673b76
algorithm and 1024-bit RSA/DSA keys.
673b76
673b76
security-libs/javax.net.ssl:
673b76
673b76
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
673b76
=========================================================================
673b76
Two new system properties have been added to customize the TLS
673b76
signature schemes in JDK. `jdk.tls.client.SignatureSchemes` has been
673b76
added for the TLS client side, and `jdk.tls.server.SignatureSchemes`
673b76
has been added for the server side.
673b76
673b76
Each system property contains a comma-separated list of supported
673b76
signature scheme names specifying the signature schemes that could be
673b76
used for the TLS connections.
673b76
673b76
The names are described in the "Signature Schemes" section of the
673b76
*Java Security Standard Algorithm Names Specification*.
673b76
673b76
security-libs/javax.security:
673b76
673b76
JDK-8242059: Support for canonicalize in krb5.conf
673b76
==================================================
673b76
673b76
The 'canonicalize' flag in the [krb5.conf file][0] is now supported by
673b76
the JDK Kerberos implementation. When set to *true*, RFC 6806 [1] name
673b76
canonicalization is requested by clients in TGT requests to KDC
673b76
services (AS protocol). Otherwise, and by default, it is not
673b76
requested.
673b76
673b76
The new default behavior is different from previous releases where
673b76
name canonicalization was always requested by clients in TGT requests
673b76
to KDC services (provided that support for RFC 6806[1] was not
673b76
explicitly disabled with the *sun.security.krb5.disableReferrals*
673b76
system or security properties).
673b76
673b76
[0]: https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html
673b76
[1]: https://tools.ietf.org/html/rfc6806
673b76
673b76
JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b
673b76
====================================================================
673b76
Following JDK's update to tzdata2020b, the long-obsolete files
673b76
pacificnew and systemv have been removed. As a result, the
673b76
"US/Pacific-New" zone name declared in the pacificnew data file is no
673b76
longer available for use.
673b76
673b76
Information regarding the update can be viewed at
673b76
https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html
673b76
673b76
New in release OpenJDK 11.0.8 (2020-07-14):
673b76
===========================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/oj1108
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.8.txt
673b76
673b76
* Security fixes
673b76
  - JDK-8230613: Better ASCII conversions
673b76
  - JDK-8231800: Better listing of arrays
673b76
  - JDK-8232014: Expand DTD support
673b76
  - JDK-8233234: Better Zip Naming
673b76
  - JDK-8233239, CVE-2020-14562: Enhance TIFF support
673b76
  - JDK-8233255: Better Swing Buttons
673b76
  - JDK-8234032: Improve basic calendar services
673b76
  - JDK-8234042: Better factory production of certificates
673b76
  - JDK-8234418: Better parsing with CertificateFactory
673b76
  - JDK-8234836: Improve serialization handling
673b76
  - JDK-8236191: Enhance OID processing
673b76
  - JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
673b76
  - JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
673b76
  - JDK-8237592, CVE-2020-14577: Enhance certificate verification
673b76
  - JDK-8238002, CVE-2020-14581: Better matrix operations
673b76
  - JDK-8238013: Enhance String writing
673b76
  - JDK-8238804: Enhance key handling process
673b76
  - JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
673b76
  - JDK-8238843: Enhanced font handing
673b76
  - JDK-8238920, CVE-2020-14583: Better Buffer support
673b76
  - JDK-8238925: Enhance WAV file playback
673b76
  - JDK-8240119, CVE-2020-14593: Less Affine Transformations
673b76
  - JDK-8240482: Improved WAV file playback
673b76
  - JDK-8241379: Update JCEKS support
673b76
  - JDK-8241522: Manifest improved jar headers redux
673b76
  - JDK-8242136, CVE-2020-14621: Better XML namespace handling
673b76
* Other changes
673b76
  - JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
673b76
  - JDK-7124307: JSpinner and changing value by mouse
673b76
  - JDK-8022574: remove HaltNode code after uncommon trap calls
673b76
  - JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
673b76
  - JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
673b76
  - JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
673b76
  - JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo
673b76
  - JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly
673b76
  - JDK-8080353: JShell: Better error message on attempting to add default method
673b76
  - JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled
673b76
  - JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
673b76
  - JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout
673b76
  - JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily
673b76
  - JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping
673b76
  - JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
673b76
  - JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
673b76
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
673b76
  - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
673b76
  - JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently
673b76
  - JDK-8191930: [Graal] emits unparseable XML into compile log
673b76
  - JDK-8193879: Java debugger hangs on method invocation
673b76
  - JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
673b76
  - JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
673b76
  - JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
673b76
  - JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
673b76
  - JDK-8198339: Test javax/swing/border/Test6981576.java is unstable
673b76
  - JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
673b76
  - JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740
673b76
  - JDK-8203672: JNI exception pending in PlainSocketImpl.c
673b76
  - JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398
673b76
  - JDK-8204834: Fix confusing "allocate" naming in OopStorage
673b76
  - JDK-8205399: Set node color on pinned HashMap.TreeNode deletion
673b76
  - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
673b76
  - JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value
673b76
  - JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
673b76
  - JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
673b76
  - JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
673b76
  - JDK-8209333: Socket reset issue for TLS 1.3 socket close
673b76
  - JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
673b76
  - JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/ArchivedModuleCompareTest.java fails with EnableJVMCI.
673b76
  - JDK-8210147: adjust some WSAGetLastError usages in windows network coding
673b76
  - JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
673b76
  - JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
673b76
  - JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to check if EnableJVMCI is set.
673b76
  - JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
673b76
  - JDK-8211301: [macos] support full window content options
673b76
  - JDK-8211332: Space for stub routines (code_size2) is too small on new Skylake CPUs
673b76
  - JDK-8211339: NPE during SSL handshake caused by HostnameChecker
673b76
  - JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
673b76
  - JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
673b76
  - JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE when JVMCI is absent
673b76
  - JDK-8212167: JShell : Stack trace of exception has wrong line number
673b76
  - JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
673b76
  - JDK-8212986: Make Visual Studio compiler check less strict
673b76
  - JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure
673b76
  - JDK-8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent
673b76
  - JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
673b76
  - JDK-8214418: half-closed SSLEngine status may cause application dead loop
673b76
  - JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"
673b76
  - JDK-8214444: Wrong strncat limits in dfa.cpp
673b76
  - JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
673b76
  - JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"
673b76
  - JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
673b76
  - JDK-8214862: assert(proj != __null) at compile.cpp:3251
673b76
  - JDK-8215369: Jcstress pollute /var/tmp with temporary files.
673b76
  - JDK-8215551: Missing case label in nmethod::reloc_string_for()
673b76
  - JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
673b76
  - JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
673b76
  - JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
673b76
  - JDK-8216154: C4819 warnings at HotSpot sources on Windows
673b76
  - JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
673b76
  - JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
673b76
  - JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
673b76
  - JDK-8217447: Develop flag TraceICs is broken
673b76
  - JDK-8217606: LdapContext#reconnect always opens a new connection
673b76
  - JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
673b76
  - JDK-8219214: Infinite Loop in CodeSection::dump()
673b76
  - JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
673b76
  - JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
673b76
  - JDK-8221121: applications/microbenchmarks are encountering crashes in tier5
673b76
  - JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread
673b76
  - JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
673b76
  - JDK-8221741: ClassCastException can happen when fontconfig.properties is used
673b76
  - JDK-8221823: Requested JDialog width is ignored
673b76
  - JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
673b76
  - JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
673b76
  - JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metric
673b76
  - JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/RemoveDropTargetCrashTest.java fails on MacOS
673b76
  - JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
673b76
  - JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
673b76
  - JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
673b76
  - JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
673b76
  - JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
673b76
  - JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
673b76
  - JDK-8225126: Test SetBoundsPaintTest.html faild on Windows when desktop is scaled
673b76
  - JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
673b76
  - JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
673b76
  - JDK-8225653: Provide more information when hitting SIGILL from HaltNode
673b76
  - JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
673b76
  - JDK-8225789: Empty method parameter type should generate ClassFormatError
673b76
  - JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
673b76
  - JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden.
673b76
  - JDK-8226653: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
673b76
  - JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread
673b76
  - JDK-8226879: Memory leak in Type::hashcons
673b76
  - JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4
673b76
  - JDK-8228407: JVM crashes with shared archive file mismatch
673b76
  - JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
673b76
  - JDK-8228757: Fail fast if the handshake type is unknown
673b76
  - JDK-8229158: make UseSwitchProfiling non-experimental or false by-default
673b76
  - JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed
673b76
  - JDK-8229855: C2 fails with assert(false) failed: bad AD file
673b76
  - JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint
673b76
  - JDK-8231118: ARM32: Math tests failures
673b76
  - JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
673b76
  - JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
673b76
  - JDK-8231438: [macOS] Dark mode for the desktop is not supported
673b76
  - JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling
673b76
  - JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors
673b76
  - JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
673b76
  - JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
673b76
  - JDK-8231671: Fix copyright headers in hotspot (missing comma after year)
673b76
  - JDK-8231720: Some perf regressions after 8225653
673b76
  - JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
673b76
  - JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument
673b76
  - JDK-8232080: jlink plugins for vendor information and run-time options
673b76
  - JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
673b76
  - JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
673b76
  - JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
673b76
  - JDK-8232357: Compare version info of Santuario to legal notice
673b76
  - JDK-8232572: Add hooks for custom output dir in Bundles.gmk
673b76
  - JDK-8232634: Problem List ICMColorDataTest.java
673b76
  - JDK-8232748: Build static versions of certain JDK libraries
673b76
  - JDK-8232846: ProcessHandle.Info command with non-English shows question marks
673b76
  - JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies
673b76
  - JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
673b76
  - JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
673b76
  - JDK-8233291: [TESTBUG] tools/jlink/plugins/VendorInfoPluginsTest.java fails with debug or non-server VMs
673b76
  - JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp
673b76
  - JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
673b76
  - JDK-8233608: Minimal build broken after JDK-8233494
673b76
  - JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
673b76
  - JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is ON
673b76
  - JDK-8233707: systemScale.cpp could not compile with VS2019
673b76
  - JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
673b76
  - JDK-8233880: Support compilers with multi-digit major version numbers
673b76
  - JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return type
673b76
  - JDK-8234137: The "AutoTestOnTop.java" test may run external applications
673b76
  - JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
673b76
  - JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/ModalDialogEnterExitEventsTest.java fails in Windows
673b76
  - JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
673b76
  - JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/DisposeDialogNotActivateOwnerTest/DisposeDialogNotActivateOwnerTest.java fails on linux-x64 nightly
673b76
  - JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
673b76
  - JDK-8234522: [macos] Crash with use of native file dialog
673b76
  - JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor
673b76
  - JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out
673b76
  - JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
673b76
  - JDK-8234728: Some security tests should support TLSv1.3
673b76
  - JDK-8234779: Provide idiom for declaring classes noncopyable
673b76
  - JDK-8234968: check calloc rv in libinstrument InvocationAdapter
673b76
  - JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/DrawImageBG/SystemBgColorTest.java fails
673b76
  - JDK-8235183: Remove the "HACK CODE" in comment
673b76
  - JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
673b76
  - JDK-8235311: Tag mismatch may alert bad_record_mac
673b76
  - JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
673b76
  - JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
673b76
  - JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
673b76
  - JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
673b76
  - JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
673b76
  - JDK-8235686: Add more custom hooks in Bundles.gmk
673b76
  - JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
673b76
  - JDK-8235762: JVM crash in SWPointer during C2 compilation
673b76
  - JDK-8235834: IBM-943 charset encoder needs updating
673b76
  - JDK-8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property.
673b76
  - JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image
673b76
  - JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
673b76
  - JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
673b76
  - JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
673b76
  - JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
673b76
  - JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
673b76
  - JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
673b76
  - JDK-8236897: Fix the copyright header for pkcs11gcm2.h
673b76
  - JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build
673b76
  - JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
673b76
  - JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing
673b76
  - JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
673b76
  - JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails with release VMs
673b76
  - JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291
673b76
  - JDK-8237192: Generate stripped/public pdbs on Windows for jdk images
673b76
  - JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers
673b76
  - JDK-8237474: Default SSLEngine should create in server role
673b76
  - JDK-8237859: C2: Crash when loads float above range check
673b76
  - JDK-8237951: CTW: C2 compilation fails with "malformed control flow"
673b76
  - JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
673b76
  - JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes.
673b76
  - JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs
673b76
  - JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
673b76
  - JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
673b76
  - JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
673b76
  - JDK-8238676: jni crashes on accessing it from process exit hook
673b76
  - JDK-8238721: Add failing client jtreg tests to the Problem List
673b76
  - JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
673b76
  - JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
673b76
  - JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
673b76
  - JDK-8238898: Missing hash characters for header on license file
673b76
  - JDK-8238942: Rendering artifacts with LCD text and fractional metrics
673b76
  - JDK-8238985: [TESTBUG] The arrow image is blue instead of green
673b76
  - JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
673b76
  - JDK-8239055: Wrong implementation of VMState.hasListener
673b76
  - JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code.
673b76
  - JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses
673b76
  - JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning
673b76
  - JDK-8239351: Give more meaningful InternalError messages in Deflater.c
673b76
  - JDK-8239365: ProcessBuilder test modifications for AIX execution
673b76
  - JDK-8239456: vtable stub generation: assert failure (code size estimate)
673b76
  - JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
673b76
  - JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
673b76
  - JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating "END." marker at lastline is not always true
673b76
  - JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings
673b76
  - JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
673b76
  - JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
673b76
  - JDK-8239819: XToolkit: Misread of screen information memory
673b76
  - JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
673b76
  - JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder
673b76
  - JDK-8239915: Zero VM crashes when handling dynamic constant
673b76
  - JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
673b76
  - JDK-8239976: Put JDK-8239965 on the ProblemList.txt
673b76
  - JDK-8240073: Fix 'test-make' build target in 11u
673b76
  - JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
673b76
  - JDK-8240202: A few client tests leave mouse buttons pressed
673b76
  - JDK-8240220: IdealLoopTree::dump_head predicate printing is broken
673b76
  - JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate
673b76
  - JDK-8240227: Loop predicates should be copied to unswitched loops
673b76
  - JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/compiler/loopopts/superword/SumRedAbsNeg_Float.java
673b76
  - JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print
673b76
  - JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module
673b76
  - JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
673b76
  - JDK-8240603: Windows 32bit compile error after 8238676
673b76
  - JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
673b76
  - JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:"
673b76
  - JDK-8240786: [TESTBUG] The test java/awt/Window/GetScreenLocation/GetScreenLocationTest.java fails on HiDPI screen
673b76
  - JDK-8240824: enhance print_full_memory_info on Linux by THP related information
673b76
  - JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
673b76
  - JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
673b76
  - JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
673b76
  - JDK-8241445: Fix copyright in test/jdk/tools/launcher/ArgFileSyntax.java
673b76
  - JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
673b76
  - JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
673b76
  - JDK-8241556: Memory leak if -XX:CompileCommand is set
673b76
  - JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"
673b76
  - JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
673b76
  - JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set
673b76
  - JDK-8241660: Add virtualization information output to hs_err file on macOS
673b76
  - JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
673b76
  - JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
673b76
  - JDK-8241900: Loop unswitching may cause dependence on null check to be lost
673b76
  - JDK-8241948: enhance list of environment variables printed in hs_err file
673b76
  - JDK-8241996: on linux set full relro in the linker flags
673b76
  - JDK-8242108: Performance regression after fix for JDK-8229496
673b76
  - JDK-8242141: New System Properties to configure the TLS signature schemes
673b76
  - JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
673b76
  - JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable
673b76
  - JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
673b76
  - JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
673b76
  - JDK-8242379: [TESTBUG] compiler/loopopts/TestLoopUnswitchingLostCastDependency.java fails with release VMs
673b76
  - JDK-8242470: Update Xerces to Version 2.12.1
673b76
  - JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
673b76
  - JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
673b76
  - JDK-8242626: enhance posix print_rlimit_info
673b76
  - JDK-8243059: Build fails when --with-vendor-name contains a comma
673b76
  - JDK-8243539: Copyright info (Year) should be updated for fix of 8241638
673b76
  - JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
673b76
  - JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
673b76
  - JDK-8244520: problemlist java/awt/font/Rotate/RotatedFontTest.java on linux
673b76
  - JDK-8244777: ClassLoaderStats VM Op uses constant hash value
673b76
  - JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function
673b76
  - JDK-8244951: Missing entitlements for hardened runtime
673b76
  - JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
673b76
  - JDK-8245649: Revert 8245397 backport of 8230591
673b76
  - JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
673b76
  - JDK-8246613: Choose the default SecureRandom algo based on registration ordering
673b76
  - JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
673b76
673b76
Notes on individual issues:
673b76
===========================
673b76
673b76
security-libs/java.security:
673b76
673b76
JDK-8244167: Removal of Comodo Root CA Certificate
673b76
==================================================
673b76
The following expired Comodo root CA certificate was removed from the `cacerts` keystore: +
673b76
alias name "addtrustclass1ca [jdk]"
673b76
673b76
Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
673b76
673b76
JDK-8244166: Removal of DocuSign Root CA Certificate
673b76
====================================================
673b76
The following expired DocuSign root CA certificate was removed from the `cacerts` keystore: +
673b76
alias name "keynectisrootca [jdk]"
673b76
673b76
Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR
673b76
673b76
security-libs/javax.crypto:pkcs11:
673b76
673b76
JDK-8240191: Allow SunPKCS11 initialization with NSS when external FIPS modules are present in the Security Modules Database
673b76
============================================================================================================================
673b76
The SunPKCS11 security provider can now be initialized with NSS when
673b76
FIPS-enabled external modules are configured in the Security Modules
673b76
Database (NSSDB). Prior to this change, the SunPKCS11 provider would
673b76
throw a RuntimeException with the message: "FIPS flag set for
673b76
non-internal module" when such a library was configured for NSS in
673b76
non-FIPS mode.
673b76
673b76
This change allows the JDK to work properly with recent NSS releases
673b76
in GNU/Linux operating systems when the system-wide FIPS policy is
673b76
turned on.
673b76
673b76
Further information can be found in JDK-8238555.
673b76
673b76
security-libs/javax.net.ssl:
673b76
673b76
JDK-8245077: Default SSLEngine Should Create in Server Role
673b76
===========================================================
673b76
In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client
673b76
mode when handshaking.  As a result, the set of default enabled
673b76
protocols may differ to what is expected. `SSLEngine` would usually be
673b76
used in server mode. From this JDK release onwards, `SSLEngine` will
673b76
default to server mode. The
673b76
`javax.net.ssl.SSLEngine.setUseClientMode(boolean mode)` method may
673b76
be used to configure the mode.
673b76
673b76
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
673b76
=========================================================================
673b76
673b76
Two new System Properties are added to customize the TLS signature
673b76
schemes in JDK.  `jdk.tls.client.SignatureSchemes` is added for TLS
673b76
client side, and `jdk.tls.server.SignatureSchemes` is added for server
673b76
side.
673b76
673b76
Each System Property contains a comma-separated list of supported
673b76
signature scheme names specifying the signature schemes that could be
673b76
used for the TLS connections.
673b76
673b76
The names are described in the "Signature Schemes" section of the
673b76
*Java Security Standard Algorithm Names Specification*.
673b76
673b76
New in release OpenJDK 11.0.7 (2020-04-14):
673b76
===========================================
673b76
Live versions of these release notes can be found at:
673b76
  * https://bitly.com/oj1107
673b76
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.7.txt
673b76
673b76
* Security fixes
673b76
  - JDK-8223898, CVE-2020-2754: Forward references to Nashorn
673b76
  - JDK-8223904, CVE-2020-2755: Improve Nashorn matching
673b76
  - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
673b76
  - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
673b76
  - JDK-8225603: Enhancement for big integers
673b76
  - JDK-8226346: Build better binary builders
673b76
  - JDK-8227467: Better class method invocations
673b76
  - JDK-8227542: Manifest improved jar headers
673b76
  - JDK-8229733: TLS message handling improvements
673b76
  - JDK-8231415, CVE-2020-2773: Better signatures in XML
673b76
  - JDK-8231785: Improved socket permissions
673b76
  - JDK-8232424, CVE-2020-2778: More constrained algorithms
673b76
  - JDK-8232581, CVE-2020-2767: Improve TLS verification
673b76
  - JDK-8233250: Better X11 rendering
673b76
  - JDK-8233410: Better Build Scripting
673b76
  - JDK-8234027: Better JCEKS key support
673b76
  - JDK-8234408, CVE-2020-2781: Improve TLS session handling
673b76
  - JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
673b76
  - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
673b76
  - JDK-8235274, CVE-2020-2805: Enhance typing of methods
673b76
  - JDK-8235691, CVE-2020-2816: Enhance TLS connectivity
673b76
  - JDK-8236201, CVE-2020-2830: Better Scanner conversions
673b76
  - JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap
673b76
* Other changes
673b76
  - JDK-4919790: Errors in alert ssl message does not reflect the actual certificate status
673b76
  - JDK-4949105: Access Bridge lacks html tags parsing
673b76
  - JDK-7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
673b76
  - JDK-7143743: Potential memory leak with zip provider
673b76
  - JDK-8005819: Support cross-realm MSSFU
673b76
  - JDK-8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/4983388/bug4983388.java fails with shortcuts on menus do not work
673b76
  - JDK-8068184: Fix for JDK-8032832 caused a deadlock
673b76
  - JDK-8145845: [AOT] NullPointerException in compiler/whitebox/GetCodeHeapEntriesTest.java
673b76
  - JDK-8152988: [AOT] Update test batch definitions to include aot-ed java.base module mode into hs-comp testing
673b76
  - JDK-8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle cross-compilation
673b76
  - JDK-8163083: SocketListeningConnector does not allow invocations with port 0
673b76
  - JDK-8163251: Hard coded loop limit prevents reading of smart card data greater than 8k
673b76
  - JDK-8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java fails with -XX:-EliminateAllocations
673b76
  - JDK-8169718: nsk/jdb/locals/locals002: ERROR: Cannot find boolVar with expected value: false
673b76
  - JDK-8176556: java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails for JFIF
673b76
  - JDK-8178798: Two compiler/aot/verification/vmflags tests fail by timeout with UseAVX=3
673b76
  - JDK-8183107: PKCS11 regression regarding checkKeySize
673b76
  - JDK-8185005: Improve performance of ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
673b76
  - JDK-8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
673b76
  - JDK-8189861: Refactor CacheFind
673b76
  - JDK-8193042: NativeLookup::lookup_critical_entry() should only load shared library once
673b76
  - JDK-8193596: java/net/DatagramPacket/ReuseBuf.java failed due to timeout
673b76
  - JDK-8194944: Regression automated test 'open/test/jdk/javax/swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java' fails
673b76
  - JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
673b76
  - JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java causes NPE
673b76
  - JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
673b76
  - JDK-8198398: Test javax/swing/JColorChooser/Test6199676.java fails in mach5
673b76
  - JDK-8199072: Test javax/swing/GroupLayout/6613904/bug6613904.java is unstable
673b76
  - JDK-8200432: javadoc fails with ClassCastException on {@link byte[]}
673b76
  - JDK-8201349: build broken when configured with --with-zlib=bundled on gcc 7.3
673b76
  - JDK-8201355: Avoid native memory allocation in sun.security.mscapi.PRNG.generateSeed
673b76
  - JDK-8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
673b76
  - JDK-8203364: Some serviceability/sa/ tests intermittently fail with java.io.IOException: LingeredApp terminated with non-zero exit code 3
673b76
  - JDK-8203687: javax/net/ssl/compatibility/Compatibility.java supports TLS 1.3
673b76
  - JDK-8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The divider location is wrong
673b76
  - JDK-8203911: Test runtime/modules/getModuleJNI/GetModule fails with -Xcheck:jni
673b76
  - JDK-8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out of java heap
673b76
  - JDK-8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent 7 timed out
673b76
  - JDK-8204551: Event descriptions are truncated in logs
673b76
  - JDK-8206963: [AOT] bug with multiple class loaders
673b76
  - JDK-8207367: 10 vmTestbase/nsk/jdi tests timed out when running with jtreg
673b76
  - JDK-8207832: serviceability/sa/ClhsdbCDSCore.java failed with "Couldn't find core file location"
673b76
  - JDK-8207938: At step6,Click Add button,case failed automatically.
673b76
  - JDK-8208157: requires.VMProps throws NPE for missing properties in "release" file
673b76
  - JDK-8208379: compiler/jvmci/events/JvmciNotifyInstallEventTest.java failed with "Got unexpected event count after 2nd install attempt: expected 9 to equal 2"
673b76
  - JDK-8208658: Make CDS archived heap regions usable even if compressed oop encoding has changed
673b76
  - JDK-8208715: Conversion of milliseconds to nanoseconds in UNIXProcess contains bug
673b76
  - JDK-8209361: [AOT] Unexpected number of references for JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111-->111]: 0 (expected at least 1)
673b76
  - JDK-8209385: CDS runtime classpath checking is too strict when only classes from the system modules are archived
673b76
  - JDK-8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
673b76
  - JDK-8209418: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
673b76
  - JDK-8209494: Create a test for SwingSet InternalFrameDemo
673b76
  - JDK-8209499: Create test for SwingSet EditorPaneDemo
673b76
  - JDK-8209574: [AOT] breakpoint events are generated in different threads does not meet expected count
673b76
  - JDK-8209686: cleanup arguments to PhaseIdealLoop() constructor
673b76
  - JDK-8209789: Synchronize test/jdk/sanity/client/lib/jemmy with code-tools/jemmy/v2
673b76
  - JDK-8209802: Garbage collectors should register JFR types themselves to avoid build errors.
673b76
  - JDK-8209807: improve handling exception in requires.VMProps
673b76
  - JDK-8209817: stack is executable when building with Clang on Linux
673b76
  - JDK-8209824: Improve the code coverage for ThreadLocal
673b76
  - JDK-8209826: Undefined reference to os::write after JDK-8209657 (filemap.hpp cleanup)
673b76
  - JDK-8209850: Allow NamedThreads to use GlobalCounter critical sections
673b76
  - JDK-8209976: Improve iteration over non-JavaThreads
673b76
  - JDK-8209993: Create a test for SwingSet3 ToolTipDemo
673b76
  - JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
673b76
  - JDK-8210052: Enable testing for all the available look and feels in SwingSet3 demo tests
673b76
  - JDK-8210055: Enable different look and feel tests in SwingSet3 demo tests
673b76
  - JDK-8210057: Enable different look and feels in SwingSet3 demo test InternalFrameDemoTest
673b76
  - JDK-8210058: Algorithmic Italic font leans opposite angle in Printing
673b76
  - JDK-8210220: [AOT] jdwp test cases are failing with error # ERROR: TEST FAILED: Cought IOException while receiving event packet
673b76
  - JDK-8210289: ArchivedKlassSubGraphInfoRecord is incomplete
673b76
  - JDK-8210459: Add support for generating compile_commands.json
673b76
  - JDK-8210476: sun/security/mscapi/PrngSlow.java fails with Still too slow
673b76
  - JDK-8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/referringObjects/referringObjects002/referringObjects002.java fails with unexpected size of ClassLoaderReference.referringObjects
673b76
  - JDK-8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java crash
673b76
  - JDK-8210632: Add key exchange algorithm to javax/net/ssl/TLSCommon/CipherSuite.java
673b76
  - JDK-8210699: Problem list tests which times out in Xcomp mode
673b76
  - JDK-8210793: [JVMCI] AllocateCompileIdTest.java failed to find DiagnosticCommand.class
673b76
  - JDK-8210910: Create test for FileChooserDemo
673b76
  - JDK-8210994: Create test for SwingSet3 FrameDemo
673b76
  - JDK-8211139: Increase timeout value in all tests under jdk/sanity/client/SwingSet/src
673b76
  - JDK-8211160: Handle different look and feels in JInternalFrameOperator
673b76
  - JDK-8211211: vmTestbase/metaspace/stressDictionary/StressDictionary.java timeout
673b76
  - JDK-8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
673b76
  - JDK-8211443: Enable different look and feels in SwingSet3 demo test SplitPaneDemoTest
673b76
  - JDK-8211703: JInternalFrame : java.lang.AssertionError: cannot find the internal frame
673b76
  - JDK-8211781: re-building fails after changing Graal sources
673b76
  - JDK-8212897: Some improvements in the EditorPaneDemotest
673b76
  - JDK-8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04 LTS
673b76
  - JDK-8213009: Refactoring existing SunMSCAPI classes
673b76
  - JDK-8213010: Supporting keys created with certmgr.exe
673b76
  - JDK-8213168: Enable different look and feel tests in SwingSet3 demo test FileChooserDemoTest
673b76
  - JDK-8213348: jdk.internal.vm.compiler.management service providers missing in module descriptor
673b76
  - JDK-8213906: Update arm devkits with libXrandr headers
673b76
  - JDK-8213908: AssertionError in DeferredAttr at setOverloadKind
673b76
  - JDK-8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
673b76
  - JDK-8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed: elembt=byte; loadbt=void; unsigned=0
673b76
  - JDK-8214345: infinite recursion while checking super class
673b76
  - JDK-8214471: Enable different look and feel tests in SwingSet3 demo test ToolTipDemoTest
673b76
  - JDK-8214534: Setting of THIS_FILE in the build is broken
673b76
  - JDK-8214557: Filter out VM flags which don't affect AOT code generation
673b76
  - JDK-8214578: [macos] Problem with backslashes on macOS/JIS keyboard: Java ignores system settings
673b76
  - JDK-8214840: runtime/NMT/MallocStressTest.java timed out
673b76
  - JDK-8214850: Rename vm_operations.?pp files to vmOperations.?pp files
673b76
  - JDK-8214904: Test8004741.java failed due to "Too few ThreadDeath hits; expected at least 6 but saw only 5"
673b76
  - JDK-8215322: add @file support to jaotc
673b76
  - JDK-8215355: Object monitor deadlock with no threads holding the monitor (using jemalloc 5.1)
673b76
  - JDK-8215396: JTabbedPane preferred size calculation is wrong for SCROLL_TAB_LAYOUT
673b76
  - JDK-8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java crashed with AOT enabled
673b76
  - JDK-8216353: Use utility APIs introduced in org/netbeans/jemmy/util/LookAndFeel class in client sanity test cases
673b76
  - JDK-8216354: Syntax error in toolchain_windows.m4
673b76
  - JDK-8216472: (se) Stack overflow during selection operation leads to crash (win)
673b76
  - JDK-8216535: tools/jimage/JImageExtractTest.java timed out
673b76
  - JDK-8217235: Create automated test for SwingSet ColorChooserDemoTest
673b76
  - JDK-8217297: Add support for multiple look and feel for SwingSet SliderDemoTest
673b76
  - JDK-8217338: [Containers] Improve systemd slice memory limit support
673b76
  - JDK-8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
673b76
  - JDK-8217634: RunTest documentation and usability update
673b76
  - JDK-8217717: ZGC: Broken oop map in C1 load barrier stub
673b76
  - JDK-8217728: Speed up incremental rerun of "make hotspot"
673b76
  - JDK-8218268: Javac treats Manifest Class-Path entries as Paths instead of URLs
673b76
  - JDK-8218662: Allow 204 responses with Content-Length:0
673b76
  - JDK-8218882: NET_Writev is declared, NET_WriteV is defined
673b76
  - JDK-8218889: Improperly use of the Optional API
673b76
  - JDK-8219205: JFR file without license header
673b76
  - JDK-8219597: (bf) Heap buffer state changes could provoke unexpected exceptions
673b76
  - JDK-8219723: javax/net/ssl/compatibility/Compatibility.java failed on some SNI cases
673b76
  - JDK-8220348: [ntintel] asserts about copying unaligned array
673b76
  - JDK-8220451: jdi/EventQueue/remove/remove004 failed due to "ERROR: thread2 is not alive"
673b76
  - JDK-8220456: jdi/EventQueue/remove_l/remove_l004 failed due to "TIMEOUT while waiting for event"
673b76
  - JDK-8220479: java/nio/channels/Selector/SelectWithConsumer.java failed at testTwoChannels()
673b76
  - JDK-8220613: java/util/Arrays/TimSortStackSize2.java times out with fastdebug build
673b76
  - JDK-8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed out
673b76
  - JDK-8220786: Create new switch to redirect error reporting output to stdout or stderr
673b76
  - JDK-8221270: Duplicated synchronized keywords in SSLSocketImpl
673b76
  - JDK-8221312: test/jdk/sanity/client/SwingSet/src/ColorChooserDemoTest.java failed
673b76
  - JDK-8221851: Use of THIS_FILE in hotspot invalidates precompiled header on Linux/GCC
673b76
  - JDK-8221885: Add intermittent test in the JavaSound to the ProblemList
673b76
  - JDK-8222264: Windows incremental build is broken with JDK-8217728
673b76
  - JDK-8222391: javax/net/ssl/compatibility/Compatibility.java should be more flexible
673b76
  - JDK-8222448: java/lang/reflect/PublicMethods/PublicMethodsTest.java times out
673b76
  - JDK-8222519: ButtonDemoScreenshotTest fails randomly with "still state to be reached"
673b76
  - JDK-8222741: jdi/EventQueue/remove/remove004 fails due to VMDisconnectedException
673b76
  - JDK-8223003: SunMSCAPI keys are not cleaned up
673b76
  - JDK-8223063: Support CNG RSA keys
673b76
  - JDK-8223158: Docked MacBook cannot start any Java Swing applications
673b76
  - JDK-8223260: NamingManager should cache InitialContextFactory
673b76
  - JDK-8223464: Improve version string for Oracle CI builds
673b76
  - JDK-8223558: Java does not render Myanmar script correctly
673b76
  - JDK-8223627: jdk-13+20 bundle name contains null instead of ea
673b76
  - JDK-8223638: Replace wildcard address with loopback or local host in tests - part 6
673b76
  - JDK-8223678: Add Visual Studio Code workspace generation support (for native code)
673b76
  - JDK-8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due to hang in LdapRequest.getReplyBer
673b76
  - JDK-8223769: Assert triggers with -XX:+StressReflectiveCode
673b76
  - JDK-8224187: Refactor arraycopy_prologue to allow ZGC read barriers on arraycopy
673b76
  - JDK-8224475: JTextPane does not show images in HTML rendering
673b76
  - JDK-8224673: Adjust permission for delayed starting of debugging
673b76
  - JDK-8224705: Tests that need to be problem-listed or have printer resources
673b76
  - JDK-8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot find J2Ddemo.jar
673b76
  - JDK-8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/NoAutotransferToDisabledCompTest.java fails linux-x64
673b76
  - JDK-8224830: test/jdk/java/awt/Focus/ModalExcludedWindowClickTest/ModalExcludedWindowClickTest.java fails on linux-x64
673b76
  - JDK-8224851: AArch64: fix warnings and errors with Clang and GCC 8.3
673b76
  - JDK-8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with stream closed
673b76
  - JDK-8225007: java/awt/print/PrinterJob/LandscapeStackOverflow.java may hang
673b76
  - JDK-8225105: java/awt/Focus/ShowFrameCheckForegroundTest/ShowFrameCheckForegroundTest.java fails in Windows 10
673b76
  - JDK-8225117: java/math/BigInteger/SymmetricRangeTests.java fails with ParseException
673b76
  - JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts test
673b76
  - JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
673b76
  - JDK-8225144: [macos] In Aqua L&F backspace key does not delete when Shift is pressed
673b76
  - JDK-8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
673b76
  - JDK-8225182: JNI exception pending in DestroyXIMCallback of awt_InputMethod.c:1327
673b76
  - JDK-8225199: [Graal] compiler/jvmci/compilerToVM/IsMatureVsReprofileTest.java fails with -XX:CompileThresholdScaling=0.1
673b76
  - JDK-8225305: ProblemList java/lang/invoke/VarHandles tests
673b76
  - JDK-8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java timed out
673b76
  - JDK-8225430: Replace wildcard address with loopback or local host in tests - part 14
673b76
  - JDK-8225435: Upgrade IANA Language Subtag Registry to the latest for JDK14
673b76
  - JDK-8225487: giflib legal file is missing attribution for openbsd-reallocarray.c
673b76
  - JDK-8225567: Wrong file headers with 8202414 fix changeset
673b76
  - JDK-8225684: [AOT] vmTestbase/vm/oom/production/AlwaysOOMProduction tests fail with AOTed java.base
673b76
  - JDK-8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
673b76
  - JDK-8225797: OldObjectSample event creates unexpected amount of checkpoint data
673b76
  - JDK-8226381: ProblemList java/lang/reflect/PublicMethods/PublicMethodsTest.java
673b76
  - JDK-8226406: JVM fails to detect mismatched or corrupt CDS archive
673b76
  - JDK-8226608: Hide the onjcmd option from the help output
673b76
  - JDK-8226892: ActionListeners on JRadioButtons don't get notified when selection is changed with arrow keys
673b76
  - JDK-8227112: exclude compiler/intrinsics/sha/sanity tests from AOT runs
673b76
  - JDK-8227324: Upgrade to freetype 2.10.1
673b76
  - JDK-8227528: TestAbortVMOnSafepointTimeout.java failed due to "RuntimeException: 'Safepoint sync time longer than' missing from stdout/stderr"
673b76
  - JDK-8227645: Some tests in serviceability/sa run with fixed -Xmx values and risk running out of memory
673b76
  - JDK-8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
673b76
  - JDK-8227662: freetype seeks to index at the end of the font data
673b76
  - JDK-8228479: Correct the format of ColorChooserDemoTest
673b76
  - JDK-8228613: java.security.Provider#getServices order is no longer deterministic
673b76
  - JDK-8228969: 2019-09-28 public suffix list update
673b76
  - JDK-8229236: CriticalJNINatives: dll handling should be done in native thread state
673b76
  - JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
673b76
  - JDK-8229888: (zipfs) Updating an existing zip file does not preserve original permissions
673b76
  - JDK-8229994: assert(false) failed: Bad graph detected in get_early_ctrl_for_expensive
673b76
  - JDK-8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
673b76
  - JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey cause Exception
673b76
  - JDK-8230390: Problemlist SA tests with AOT
673b76
  - JDK-8230400: Missing constant pool entry for a method in stacktrace
673b76
  - JDK-8230459: Test failed to resume JVMCI CompilerThread
673b76
  - JDK-8230480: check malloc/calloc results in java.desktop
673b76
  - JDK-8230597: Update GIFlib library to the 5.2.1
673b76
  - JDK-8230611: infinite loop in LogOutputList::wait_until_no_readers()
673b76
  - JDK-8230624: [TESTBUG] Problemlist JFR compiler/TestCodeSweeper.java
673b76
  - JDK-8230677: Should disable Escape Analysis if JVMTI capability can_get_owned_monitor_info was taken
673b76
  - JDK-8230926: [macosx] Two apostrophes are entered instead of one with "U.S. International - PC" layout
673b76
  - JDK-8231025: Incorrect method tag offset for big endian platform
673b76
  - JDK-8231081: TestMetadataRetention fails due to missing symbol id
673b76
  - JDK-8231387: java.security.Provider.getService returns random result due to race condition with mutating methods in the same class
673b76
  - JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
673b76
  - JDK-8231445: check ZALLOC return values in awt coding
673b76
  - JDK-8231507: Update Apache Santuario (XML Signature) to version 2.1.4
673b76
  - JDK-8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call
673b76
  - JDK-8231753: use more Posix functionality in aix os::print_os_info
673b76
  - JDK-8231810: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java fails intermittently with "java.lang.Exception: Unexpected EOF"
673b76
  - JDK-8232003: (fs) Files.write can leak file descriptor in the exception case
673b76
  - JDK-8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC: Heap too small
673b76
  - JDK-8232060: add some initializations using sigemptyset in os_aix.cpp
673b76
  - JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
673b76
  - JDK-8232167: Visual Studio install found through --with-tools-dir value is discarded
673b76
  - JDK-8232170: FSInfo#getJarClassPath throws an exception not declared in its throws clause
673b76
  - JDK-8232200: [macos 10.15] Windows in fullscreen tests jumps around the screen
673b76
  - JDK-8232207: Linux os::available_memory re-reads cgroup configuration on every invocation
673b76
  - JDK-8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
673b76
  - JDK-8232370: Refactor some com.sun.jdi tests to enable IDE integration
673b76
  - JDK-8232433: [macos 10.15] java/awt/Window/LocationAtScreenCorner/LocationAtScreenCorner.java may fail
673b76
  - JDK-8232571: Add missing SIGINFO signal
673b76
  - JDK-8232692: [TESTBUG] compiler/aot/fingerprint/SelfChangedCDS.java fails when cds is disabled
673b76
  - JDK-8232713: Update BCEL version to 6.3.1 in license file
673b76
  - JDK-8232806: Introduce a system property to disable eager lambda initialization
673b76
  - JDK-8232834: RunTest sometimes fails to produce valid exitcode.txt
673b76
  - JDK-8232880: Update test documentation with additional settings for client UI tooltip tests
673b76
  - JDK-8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures.
673b76
  - JDK-8233018: Add a new test to verify that DatagramSocket is not interruptible
673b76
  - JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong result if Klass* is aligned to 32bit
673b76
  - JDK-8233032: assert(in_bb(n)) failed: must be
673b76
  - JDK-8233078: fix minimal VM build on Linux ppc64(le)
673b76
  - JDK-8233328: fix minimal VM build on Linux s390x
673b76
  - JDK-8233383: Various minor fixes
673b76
  - JDK-8233466: aarch64: remove unnecessary load of mdo when profiling return and parameters type
673b76
  - JDK-8233491: Crash in AdapterHandlerLibrary::get_adapter with CDS due to code cache exhaustion
673b76
  - JDK-8233529: loopTransform.cpp:2984: Error: assert(p_f->Opcode() == Op_IfFalse) failed
673b76
  - JDK-8233548: Update CUP to v0.11b
673b76
  - JDK-8233649: Update ProblemList.txt to exclude failing headful tests on macos
673b76
  - JDK-8233656: assert(d->is_CFG() && n->is_CFG()) failed: must have CFG nodes
673b76
  - JDK-8233657: Intermittent NPE in Component.validate()
673b76
  - JDK-8234288: Turkey Time Zone returns incorrect time zone name
673b76
  - JDK-8234323: NULL-check return value of SurfaceData_InitOps on macosx
673b76
  - JDK-8234339: replace JLI_StrTok in java_md_solinux.c
673b76
  - JDK-8234340: Bump update version for OpenJDK: jdk-11.0.7
673b76
  - JDK-8234350: assert(mode == ControlAroundStripMined && (use == sfpt || !use->is_reachable_from_root())) failed: missed a node
673b76
  - JDK-8234386: [macos] NPE was thrown at expanding Choice from maximized frame
673b76
  - JDK-8234397: add OS uptime information to os::print_os_info output
673b76
  - JDK-8234423: Modifying ArrayList.subList().subList() resets modCount of subList
673b76
  - JDK-8234466: Class loading deadlock involving X509Factory#commitEvent()
673b76
  - JDK-8234501: remove obsolete NET_ReadV
673b76
  - JDK-8234525: enable link-time section-gc for linux s390x to remove unused code
673b76
  - JDK-8234610: MaxVectorSize set wrongly when UseAVX=3 is specified after JDK-8221092
673b76
  - JDK-8234617: C1: Incorrect result of field load due to missing narrowing conversion
673b76
  - JDK-8234723: javax/net/ssl/TLS tests support TLSv1.3
673b76
  - JDK-8234724: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java supports TLSv1.3
673b76
  - JDK-8234741: enhance os::get_core_path on macOS
673b76
  - JDK-8234769: Duplicate attribution in freetype.md
673b76
  - JDK-8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
673b76
  - JDK-8234809: set relro in linker flags when building with gcc
673b76
  - JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java fails on Windows 10
673b76
  - JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
673b76
  - JDK-8235288: AVX 512 instructions inadvertently used on Xeon for small vector width operations
673b76
  - JDK-8235325: build failure on Linux after 8235243
673b76
  - JDK-8235383: C1 compilation fails with -XX:+PrintIRDuringConstruction -XX:+Verbose
673b76
  - JDK-8235489: handle return values of sscanf calls in hotspot
673b76
  - JDK-8235509: Backport for JDK-8209657 Refactor filemap.hpp to simplify integration with Serviceability Agent.
673b76
  - JDK-8235510: java.util.zip.CRC32 performance drop after 8200067
673b76
  - JDK-8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java does not handle archive mapping failure
673b76
  - JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if prelink is enabled
673b76
  - JDK-8235671: enhance print_rlimit_info in os_posix
673b76
  - JDK-8235744: PIT: test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in linux-x64
673b76
  - JDK-8235904: Infinite loop when rendering huge lines
673b76
  - JDK-8235998: [c2] Memory leaks during tracing after '8224193: stringStream should not use Resource Area'.
673b76
  - JDK-8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
673b76
  - JDK-8236140: assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it
673b76
  - JDK-8236179: C1 register allocation error with T_ADDRESS
673b76
  - JDK-8236488: Support for configure option --with-native-debug-symbols=internal is impossible on Windows
673b76
  - JDK-8236500: Windows ucrt.dll should be looked up in versioned WINSDK subdirectory
673b76
  - JDK-8236709: struct SwitchRange in HS violates C++ One Definition Rule
673b76
  - JDK-8236848: [JDK 11u] make run-test-tier1 fails after backport of JDK-8232834
673b76
  - JDK-8236873: Worker has a deadlock bug
673b76
  - JDK-8237217: Incorrect G1StringDedupEntry type used in StringDedupTable destructor
673b76
  - JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
673b76
  - JDK-8237375: SimpleThresholdPolicy misses CounterDecay timestamp initialization
673b76
  - JDK-8237508: Simplify JarFile.isInitializing
673b76
  - JDK-8237540: Missing files in backport of JDK-8210910
673b76
  - JDK-8237541: Missing files in backport of JDK-8236528
673b76
  - JDK-8237600: Test SunJSSEFIPSInit fails on Ubuntu
673b76
  - JDK-8237819: s390x - remove unused pd_zero_to_words_large
673b76
  - JDK-8237869: exclude jtreg test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java because of instabilities
673b76
  - JDK-8237879: make 4.3 breaks build
673b76
  - JDK-8237945: CTW: C2 compilation fails with assert(just_allocated_object(alloc_ctl) == ptr) failed: most recent allo
673b76
  - JDK-8238225: Issues reported after replacing symlink at Contents/MacOS/libjli.dylib with binary
673b76
  - JDK-8238247: CTW runner should sweep nmethods more aggressively
673b76
  - JDK-8238366: CTW runner closes standard output on exit
673b76
  - JDK-8238438: SuperWord::co_locate_pack picks memory state of first instead of last load
673b76
  - JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
673b76
  - JDK-8238534: Deep sign macOS bundles before bundle archive is being created
673b76
  - JDK-8238591: CTW: Split applications/ctw/modules/jdk_localedata.java
673b76
  - JDK-8238596: AVX enabled by default for Skylake even when unsupported
673b76
  - JDK-8238811: C2: assert(i >= req() || i == 0 || is_Region() || is_Phi()) with -XX:+VerifyGraphEdges
673b76
  - JDK-8239005: [TESTBUG] test/hotspot/jtreg/runtime/StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must initialize static state before calling do_overflow()
673b76
  - JDK-8239466: Loss of precision in counter decay calculation in 11u backport of JDK-8237375
673b76
  - JDK-8239856: [ntintel] asserts about copying unaligned array element
673b76
  - JDK-8240724: [test] jdk11 downport of 8224475 misses binary file test/jdk/javax/swing/JTextPane/arrow.png
673b76
  - JDK-8241296: Segfault in JNIHandleBlock::oops_do()
673b76
673b76
Notes on individual issues:
673b76
===========================
673b76
673b76
security-libs/javax.xml.crypto:
673b76
673b76
JDK-8239467: Apache Santuario Library Updated to Version 2.1.4
673b76
==============================================================
673b76
The Apache Santuario library has been upgraded to version 2.1.4. As a
673b76
result, a new system property
673b76
`com.sun.org.apache.xml.internal.security.parser.pool-size` has been
673b76
introduced.
673b76
673b76
This new system property sets the pool size of the internal
673b76
`DocumentBuilder` cache used when processing XML Signatures. The
673b76
function is equivalent to the
673b76
`org.apache.xml.security.parser.pool-size` system property used in
673b76
Apache Santuario and has the same default value of 20.