Blame SOURCES/NEWS

eda148
Key:
eda148
eda148
JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X
eda148
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
eda148
ac0427
New in release OpenJDK 11.0.13 (2021-10-19):
ac0427
=============================================
ac0427
Live versions of these release notes can be found at:
ac0427
  * https://bitly.com/openjdk11013
ac0427
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.13.txt
ac0427
ac0427
* Security fixes
ac0427
  - JDK-8163326, CVE-2021-35550: Update the default enabled cipher suites preference
ac0427
  - JDK-8254967, CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close
ac0427
  - JDK-8263314: Enhance XML Dsig modes
ac0427
  - JDK-8265167, CVE-2021-35556: Richer Text Editors
ac0427
  - JDK-8265574: Improve handling of sheets
ac0427
  - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit
ac0427
  - JDK-8265776: Improve Stream handling for SSL
ac0427
  - JDK-8266097, CVE-2021-35561: Better hashing support
ac0427
  - JDK-8266103: Better specified spec values
ac0427
  - JDK-8266109: More Resilient Classloading
ac0427
  - JDK-8266115: More Manifest Jar Loading
ac0427
  - JDK-8266137, CVE-2021-35564: Improve Keystore integrity
ac0427
  - JDK-8266689, CVE-2021-35567: More Constrained Delegation
ac0427
  - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic
ac0427
  - JDK-8267712: Better LDAP reference processing
ac0427
  - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking
ac0427
  - JDK-8267735, CVE-2021-35586: Better BMP support
ac0427
  - JDK-8268193: Improve requests of certificates
ac0427
  - JDK-8268199: Correct certificate requests
ac0427
  - JDK-8268205: Enhance DTLS client handshake
ac0427
  - JDK-8268506: More Manifest Digests
ac0427
  - JDK-8269618, CVE-2021-35603: Better session identification
ac0427
  - JDK-8269624: Enhance method selection support
ac0427
  - JDK-8270398: Enhance canonicalization
ac0427
  - JDK-8270404: Better canonicalization
ac0427
* Other changes
ac0427
  - JDK-8024368: private methods are allocated vtable indices
ac0427
  - JDK-8042902: Test java/net/Inet6Address/serialize/Inet6AddressSerializationTest.java fails intermittently
ac0427
  - JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
ac0427
  - JDK-8157404: Unable to read certain PKCS12 keystores from SequenceInputStream
ac0427
  - JDK-8158066: SourceDebugExtensionTest fails to rename file
ac0427
  - JDK-8168304: Make all of DependencyContext_test available in product mode
ac0427
  - JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java fails intermittently with BindException
ac0427
  - JDK-8181313: SA: Remove libthread_db dependency on Linux
ac0427
  - JDK-8193214: Incorrect annotations.without.processors warnings with JDK 9
ac0427
  - JDK-8194230: jdk/internal/jrtfs/remote/RemoteRuntimeImageTest.java fails with java.lang.NullPointerException
ac0427
  - JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java fails
ac0427
  - JDK-8199931: java/net/MulticastSocket/UnreferencedMulticastSockets.java fails with "incorrect data received"
ac0427
  - JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK version changes
ac0427
  - JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java failed on Mac 10.13 with zh_CN and zh_TW locales.
ac0427
  - JDK-8207316: java/nio/channels/spi/SelectorProvider/inheritedChannel/InheritedChannelTest.java failed
ac0427
  - JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
ac0427
  - JDK-8208363: test/jdk/java/lang/Package/PackageFromManifest.java missing module dependencies declaration
ac0427
  - JDK-8209380: ARM: cleanup maybe-uninitialized and reorder compiler warnings
ac0427
  - JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh to plain java test
ac0427
  - JDK-8209772: Refactor shell test java/util/ServiceLoader/basic/basic.sh to java
ac0427
  - JDK-8209773: Refactor shell test javax/naming/module/basic.sh to java
ac0427
  - JDK-8209832: Refactor jdk/internal/reflect/Reflection/GetCallerClassTest.sh to plain java test
ac0427
  - JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh to plain java test
ac0427
  - JDK-8210406: Refactor java.util.PluggableLocale:i18n shell tests to plain java tests
ac0427
  - JDK-8210407: Refactor java.util.Calendar:i18n shell tests to plain java tests
ac0427
  - JDK-8210495: compiler crashes because of illegal signature in otherwise legal code
ac0427
  - JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time image layout
ac0427
  - JDK-8210802: temp files left by tests in jdk/java/net/httpclient
ac0427
  - JDK-8210819: Update the host name in CNameTest.java
ac0427
  - JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain java test
ac0427
  - JDK-8210934: Move sun/net/www/protocol/http/GetErrorStream.java to OpenJDK
ac0427
  - JDK-8210959: JShell fails and exits when statement throws an exception whose message contains a '%'.
ac0427
  - JDK-8211055: Provide print to a file (PDF) feature even when printer was not connected
ac0427
  - JDK-8211092: test/jdk/sun/net/www/http/HttpClient/MultiThreadTest.java fails intermittently when cleaning up
ac0427
  - JDK-8211296: Remove HotSpot deprecation warning suppression for Mac/clang
ac0427
  - JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails with cleaning up
ac0427
  - JDK-8212040: Compilation error due to wrong usage of NSPrintJobDispositionValue in mac10.12
ac0427
  - JDK-8212695: Add explicit timeout to several HTTP Client tests
ac0427
  - JDK-8212718: Refactor some annotation processor tests to better use collections
ac0427
  - JDK-8213007: Update the link in test/jdk/sun/security/provider/SecureRandom/DrbgCavp.java
ac0427
  - JDK-8213137: Remove static initialization of monitor/mutex instances
ac0427
  - JDK-8213235: java/nio/channels/SocketChannel/AsyncCloseChannel.java fails with threads that didn't exit
ac0427
  - JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests to plain java tests
ac0427
  - JDK-8213576: Make test AsyncCloseChannel.java run in othervm
ac0427
  - JDK-8213694: Test Timeout.java should run in othervm mode
ac0427
  - JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/except/except002 and except003
ac0427
  - JDK-8213922: fix ctw stand-alone build
ac0427
  - JDK-8214195: Align stdout messages in test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
ac0427
  - JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/NonUniqueAliases.java failed with incorrect jtreg tags order
ac0427
  - JDK-8214937: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed due to unexpected expiration date
ac0427
  - JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
ac0427
  - JDK-8217825: Verify @AfterTest is used correctly in WebSocket tests
ac0427
  - JDK-8218145: block_if_requested is not proper inlined due to size
ac0427
  - JDK-8219417: bump jtreg requiredVersion to b14
ac0427
  - JDK-8219552: bump jtreg requiredVersion to b14 in test/jdk/sanity/client/
ac0427
  - JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails intermittently due to NumberFormatException
ac0427
  - JDK-8220445: Support for side by side MSVC Toolset versions
ac0427
  - JDK-8221988: add possibility to build with Visual Studio 2019
ac0427
  - JDK-8222751: closed/test/jdk/sun/security/util/DerIndefLenConverter/IndefBerPkcs12.java fail
ac0427
  - JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use Dependencies::find_unique_concrete_method() for non-virtual methods
ac0427
  - JDK-8224853: CDS address sanitizer errors
ac0427
  - JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021
ac0427
  - JDK-8225583: Examine the HttpResponse.BodySubscribers for null handling and multiple subscriptions
ac0427
  - JDK-8225690: Multiple AttachListener threads can be created
ac0427
  - JDK-8225790: Two NestedDialogs tests fail on Ubuntu
ac0427
  - JDK-8226319: Add forgotten test/jdk/java/net/httpclient/BodySubscribersTest.java
ac0427
  - JDK-8226533: JVMCI: findUniqueConcreteMethod should handle statically bindable methods directly
ac0427
  - JDK-8226602: Test convenience reactive primitives from java.net.http with RS TCK
ac0427
  - JDK-8226683: Remove review suggestion from fix to 8219804
ac0427
  - JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due to "exit code is 134"
ac0427
  - JDK-8227766: CheckUnhandledOops is broken in MemAllocator
ac0427
  - JDK-8227815: Minimal VM: set_state is not a member of AttachListener
ac0427
  - JDK-8230674: Heap dumps should exclude dormant CDS archived objects of unloaded classes
ac0427
  - JDK-8230808: Remove Access::equals()
ac0427
  - JDK-8230841: Remove oopDesc::equals()
ac0427
  - JDK-8231717: Improve performance of charset decoding when charset is always compactable
ac0427
  - JDK-8232243: Wrong caret position in JTextPane on Windows with a screen resolution > 100%
ac0427
  - JDK-8232782: Shenandoah: streamline post-LRB CAS barrier (aarch64)
ac0427
  - JDK-8233790: Forward output from heap dumper to jcmd/jmap
ac0427
  - JDK-8233989: Create an IPv4 version of java/net/MulticastSocket/SetLoopbackMode.java
ac0427
  - JDK-8234510: Remove file seeking requirement for writing a heap dump
ac0427
  - JDK-8235211: serviceability/attach/RemovingUnixDomainSocketTest.java fails with AttachNotSupportedException: Unable to open socket file
ac0427
  - JDK-8235216: typo in test filename
ac0427
  - JDK-8235866: bump jtreg requiredVersion to 4.2b16
ac0427
  - JDK-8236111: narrow allowSmartActionArgs disabling
ac0427
  - JDK-8236413: AbstractConnectTimeout should tolerate both NoRouteToHostException and UnresolvedAddressException
ac0427
  - JDK-8236671: NullPointerException in JKS keystore
ac0427
  - JDK-8238930: problem list compiler/c2/Test8004741.java
ac0427
  - JDK-8238943: switch to jtreg 5.0
ac0427
  - JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS breaks QuietOption.java test
ac0427
  - JDK-8240983: Incorrect copyright header in Apache Santuario 2.1.3 files
ac0427
  - JDK-8241336: Some java.net tests failed with NoRouteToHostException on MacOS with special network configuration
ac0427
  - JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
ac0427
  - JDK-8241768: git needs .gitattributes
ac0427
  - JDK-8242882: opening jar file with large manifest might throw NegativeArraySizeException
ac0427
  - JDK-8244973: serviceability/attach/RemovingUnixDomainSocketTest.java fails "stderr was not empty"
ac0427
  - JDK-8245134: test/lib/jdk/test/lib/security/KeyStoreUtils.java should allow to specify aliases
ac0427
  - JDK-8246261: TCKLocalTime.java failed due to "AssertionError: expected [18:14:22] but found [18:14:23]"
ac0427
  - JDK-8246387: switch to jtreg 5.1
ac0427
  - JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed allocating blob
ac0427
  - JDK-8247469: getSystemCpuLoad() returns -1 on linux when some offline cpus are present and cpusets.effective_cpus is not available
ac0427
  - JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/TextLayout/ArabicDiacriticTest.java can leave frame open
ac0427
  - JDK-8248403: AArch64: Remove uses of kernel integer types
ac0427
  - JDK-8248414: AArch64: Remove uses of long and unsigned long ints
ac0427
  - JDK-8248657: Windows: strengthening in ThreadCritical regarding memory model
ac0427
  - JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
ac0427
  - JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
ac0427
  - JDK-8248671: AArch64: Remove unused variables
ac0427
  - JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
ac0427
  - JDK-8248816: C1: Fix signature conflict in LIRGenerator::strength_reduce_multiply
ac0427
  - JDK-8249095: tools/javac/launcher/SourceLauncherTest.java fails on Windows
ac0427
  - JDK-8249548: backward focus traversal gets stuck in button group
ac0427
  - JDK-8249773: Upgrade ReceiveISA.java test to be resilient to failure due to stray packets and interference
ac0427
  - JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o bug-id
ac0427
  - JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses @ignore w/o bug-id
ac0427
  - JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses @ignore w/o bug-id
ac0427
  - JDK-8250588: Shenandoah: LRB needs to save/restore fp registers for runtime call
ac0427
  - JDK-8250824: AArch64: follow up for JDK-8248414
ac0427
  - JDK-8251166: Add automated testcases for changes done in JDK-8214112
ac0427
  - JDK-8251252: Add automated testcase for fix done in JDK-8214253
ac0427
  - JDK-8251254: Add automated test for fix done in JDK-8218472
ac0427
  - JDK-8251361: Potential race between Logger configuration and GCs in HttpURLConWithProxy test
ac0427
  - JDK-8251549: Update docs on building for Git
ac0427
  - JDK-8251945: SIGSEGV in PackageEntry::purge_qualified_exports()
ac0427
  - JDK-8252194: Add automated test for fix done in JDK-8218469
ac0427
  - JDK-8252648: Shenandoah: name gang tasks consistently
ac0427
  - JDK-8252825: Add automated test for fix done in JDK-8218479
ac0427
  - JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java fails intermittently with C1
ac0427
  - JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially consistent
ac0427
  - JDK-8253048: AArch64: When CallLeaf, no need to preserve callee-saved registers in caller
ac0427
  - JDK-8253424: Add support for running pre-submit testing using GitHub Actions
ac0427
  - JDK-8253631: Remove unimplemented CompileBroker methods after JEP-165
ac0427
  - JDK-8253865: Pre-submit testing using GitHub Actions does not detect failures reliably
ac0427
  - JDK-8253899: Make IsClassUnloadingEnabled signature match specification
ac0427
  - JDK-8254024: Enhance native libs for AWT and Swing to work with GraalVM Native Image
ac0427
  - JDK-8254054: Pre-submit testing using GitHub Actions should not use the deprecated set-env command
ac0427
  - JDK-8254173: Add Zero, Minimal hotspot targets to submit workflow
ac0427
  - JDK-8254175: Build no-pch configuration in debug mode for submit checks
ac0427
  - JDK-8254244: Some code emitted by TemplateTable::branch is unused when running TieredCompilation
ac0427
  - JDK-8254270: linux 32 bit build doesn't compile libjdwp/log_messages.c
ac0427
  - JDK-8254282: Add Linux x86_32 builds to submit workflow
ac0427
  - JDK-8254850: Update terminology in java.awt.GridBagLayout source code comments
ac0427
  - JDK-8255255: Update Apache Santuario (XML Signature) to version 2.2.1
ac0427
  - JDK-8255305: Add Linux x86_32 tier1 to submit workflow
ac0427
  - JDK-8255352: Archive important test outputs in submit workflow
ac0427
  - JDK-8255373: Submit workflow artifact name is always "test-results_.zip"
ac0427
  - JDK-8255452: Doing GC during JVMTI MethodExit event posting breaks return oop
ac0427
  - JDK-8255718: Zero: VM should know it runs in interpreter-only mode
ac0427
  - JDK-8255790: GTKL&F: Java 16 crashes on initialising GTKL&F on Manjaro Linux
ac0427
  - JDK-8255810: Zero: build fails without JVMTI
ac0427
  - JDK-8255895: Submit workflow artifacts miss hs_errs/replays due to ZIP include mismatch
ac0427
  - JDK-8256127: Add cross-compiled foreign architectures builds to submit workflow
ac0427
  - JDK-8256215: Shenandoah: re-organize saving/restoring machine state in assembler code
ac0427
  - JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for x86_32 and lower -XX:+UseSSE
ac0427
  - JDK-8256277: Github Action build on macOS should define OS and Xcode versions
ac0427
  - JDK-8256354: Github Action build on Windows should define OS and MSVC versions
ac0427
  - JDK-8256393: Github Actions build on Linux should define OS and GCC versions
ac0427
  - JDK-8256414: add optimized build to submit workflow
ac0427
  - JDK-8256747: GitHub Actions: decouple the hotspot build-only jobs from Linux x64 testing
ac0427
  - JDK-8257056: Submit workflow should apt-get update to avoid package installation errors
ac0427
  - JDK-8257148: Remove obsolete code in AWTView.m
ac0427
  - JDK-8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280
ac0427
  - JDK-8257620: Do not use objc_msgSend_stret to get macOS version
ac0427
  - JDK-8257913: Add more known library locations to simplify Linux cross-compilation
ac0427
  - JDK-8258703: Incorrect 512-bit vector registers restore on x86_32
ac0427
  - JDK-8259338: Add expiry exception for identrustdstx3 alias to VerifyCACerts.java test
ac0427
  - JDK-8259535: ECDSA SignatureValue do not always have the specified length
ac0427
  - JDK-8259679: GitHub actions should use MSVC 14.28
ac0427
  - JDK-8259924: GitHub actions fail on Linux x86_32 with "Could not configure libc6:i386"
ac0427
  - JDK-8260460: GitHub actions still fail on Linux x86_32 with "Could not configure libc6:i386"
ac0427
  - JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
ac0427
  - JDK-8260923: Add more tests for SSLSocket input/output shutdown
ac0427
  - JDK-8261072: AArch64: Fix MacroAssembler::get_thread convention
ac0427
  - JDK-8261147: C2: Node is wrongly marked as reduction resulting in a wrong execution due to wrong vector instructions
ac0427
  - JDK-8261238: NMT should not limit baselining by size threshold
ac0427
  - JDK-8261496: Shenandoah: reconsider pacing updates memory ordering
ac0427
  - JDK-8261652: Remove some dead comments from os_bsd_x86
ac0427
  - JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync with the StackFrameStream
ac0427
  - JDK-8262000: jdk/jfr/event/gc/detailed/TestPromotionFailedEventWithParallelScavenge.java failed with "OutOfMemoryError: Java heap space"
ac0427
  - JDK-8262017: C2: assert(n != __null) failed: Bad immediate dominator info.
ac0427
  - JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
ac0427
  - JDK-8262409: sun/security/ssl/SSLSocketImpl/SSLSocketImplThrowsWrongExceptions. SSL test failures caused by java failed with "Server reported the wrong exception"
ac0427
  - JDK-8262470: Printed GlyphVector outline with low DPI has bad quality on Windows
ac0427
  - JDK-8262862: Harden tests sun/security/x509/URICertStore/ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
ac0427
  - JDK-8263136: C4530 was reported from VS 2019 at access bridge
ac0427
  - JDK-8263227: C2: inconsistent spilling due to dead nodes in exception block
ac0427
  - JDK-8263382: java/util/logging/ParentLoggersTest.java failed with "checkLoggers: getLoggerNames() returned unexpected loggers"
ac0427
  - JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
ac0427
  - JDK-8263432: javac may report an invalid package/class clash on case insensitive filesystems
ac0427
  - JDK-8263490: [macos] Crash occurs on JPasswordField with activated InputMethod
ac0427
  - JDK-8263531: Remove unused buffer int
ac0427
  - JDK-8263667: Avoid running GitHub actions on branches named pr/*
ac0427
  - JDK-8263776: [JVMCI] add helper to perform Java upcalls
ac0427
  - JDK-8264016: [JVMCI] add some thread local fields for use by JVMCI
ac0427
  - JDK-8264752: SIGFPE crash with option FlightRecorderOptions:threadbuffersize=30M
ac0427
  - JDK-8265132: C2 compilation fails with assert "missing precedence edge"
ac0427
  - JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after fix for JDK-8264821
ac0427
  - JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay description
ac0427
  - JDK-8265756: AArch64: initialize memory allocated for locals according to Windows AArch64 stack page growth requirement in template interpreter
ac0427
  - JDK-8265761: Font with missed font family name is not properly printed on Windows
ac0427
  - JDK-8265773: incorrect jdeps message "jdk8internals" to describe a removed JDK internal API
ac0427
  - JDK-8265836: OperatingSystemImpl.getCpuLoad() returns incorrect CPU load inside a container
ac0427
  - JDK-8266018: Shenandoah: fix an incorrect assert
ac0427
  - JDK-8266206: Build failure after JDK-8264752 with older GCCs
ac0427
  - JDK-8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
ac0427
  - JDK-8266288: assert root method not found in witnessed_reabstraction_in_supers is too strong
ac0427
  - JDK-8266404: Fatal error report generated with -XX:+CrashOnOutOfMemoryError should not contain suggestion to submit a bug report
ac0427
  - JDK-8266480: Implicit null check optimization does not update control of hoisted memory operation
ac0427
  - JDK-8266615: C2 incorrectly folds subtype checks involving an interface array
ac0427
  - JDK-8266642: Improve ResolvedMethodTable hash function
ac0427
  - JDK-8266749: AArch64: Backtracing broken on PAC enabled systems
ac0427
  - JDK-8266761: AssertionError in sun.net.httpserver.ServerImpl.responseCompleted
ac0427
  - JDK-8266813: Shenandoah: Use shorter instruction sequence for checking if marking in progress
ac0427
  - JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due to uninitialized BasicObjectLock::_displaced_header
ac0427
  - JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use Metaspace with less classes
ac0427
  - JDK-8267396: Avoid recording "pc" in unhandled oops detector for better performance
ac0427
  - JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java test failed with assertion
ac0427
  - JDK-8267424: CTW: C1 fails with "State must not be null"
ac0427
  - JDK-8267459: Pasting Unicode characters into JShell does not work.
ac0427
  - JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
ac0427
  - JDK-8267666: Add option to jcmd GC.heap_dump to use existing file
ac0427
  - JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
ac0427
  - JDK-8267751: (test) jtreg.SkippedException has no serial VersionUID
ac0427
  - JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle min_jint correctly
ac0427
  - JDK-8268103: JNI functions incorrectly return a double after JDK-8265836
ac0427
  - JDK-8268127: Shenandoah: Heap size may be too small for region to align to large page size
ac0427
  - JDK-8268261: C2: assert(n != __null) failed: Bad immediate dominator info.
ac0427
  - JDK-8268347: C2: nested locks optimization may create unbalanced monitor enter/exit code
ac0427
  - JDK-8268360: Missing check for infinite loop during node placement
ac0427
  - JDK-8268362: [REDO] C2 crash when compile negative Arrays.copyOf length after loop
ac0427
  - JDK-8268366: Incorrect calculation of has_fpu_registers in C1 linear scan
ac0427
  - JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to missing null check
ac0427
  - JDK-8268417: Add test from JDK-8268360
ac0427
  - JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance
ac0427
  - JDK-8268617: [11u REDO] - WebSocket over authenticating proxy fails with NPE
ac0427
  - JDK-8268620: InfiniteLoopException test may fail on x86 platforms
ac0427
  - JDK-8268635: Corrupt oop in ClassLoaderData
ac0427
  - JDK-8268699: Shenandoah: Add test for JDK-8268127
ac0427
  - JDK-8268771: javadoc -notimestamp option does not work on index.html
ac0427
  - JDK-8268775: Password is being converted to String in AccessibleJPasswordField
ac0427
  - JDK-8268776: Test `ADatagramSocket.java` missing /othervm from @run tag
ac0427
  - JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server
ac0427
  - JDK-8269304: Regression ~5% in 2005 in b27
ac0427
  - JDK-8269415: [11u] Remove ea from DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
ac0427
  - JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should be more resilient
ac0427
  - JDK-8269529: javax/swing/reliability/HangDuringStaticInitialization.java fails in Windows debug build
ac0427
  - JDK-8269594: assert(_handle_mark_nesting > 1) failed: memory leak: allocating handle outside HandleMark
ac0427
  - JDK-8269614: [s390] Interpreter checks wrong bit for slow path instance allocation
ac0427
  - JDK-8269650: Optimize gc-locker in [Get|Release]StringCritical for latin string
ac0427
  - JDK-8269661: JNI_GetStringCritical does not lock char array
ac0427
  - JDK-8269668: [aarch64] java.library.path not including /usr/lib64
ac0427
  - JDK-8269763: The JEditorPane is blank after JDK-8265167
ac0427
  - JDK-8269795: C2: Out of bounds array load floats above its range check in loop peeling resulting in SEGV
ac0427
  - JDK-8269847: JDK-8269594 backport breaks 11u builds
ac0427
  - JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0
ac0427
  - JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers
ac0427
  - JDK-8269882: stack-use-after-scope in NewObjectA
ac0427
  - JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status
ac0427
  - JDK-8270096: Shenandoah: Optimize gc/shenandoah/TestRefprocSanity.java for interpreter mode
ac0427
  - JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup
ac0427
  - JDK-8270184: [TESTBUG] Add coverage for jvmci ResolvedJavaType.toJavaName() for lambdas
ac0427
  - JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns incorrect type name for lambdas
ac0427
  - JDK-8270556: Exclude security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA
ac0427
  - JDK-8270893: IndexOutOfBoundsException while reading large TIFF file
ac0427
  - JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
ac0427
  - JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon
ac0427
  - JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj
ac0427
  - JDK-8272197: Update 11u GHA workflow with Shenandoah configurations
ac0427
  - JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz after JDK-8255790
ac0427
  - JDK-8272472: StackGuardPages test doesn't build with glibc 2.34
ac0427
  - JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used
ac0427
  - JDK-8272628: Problemlist gc/stress/gcbasher/TestGCBasherWithCMS.java for x86_32
ac0427
  - JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848
ac0427
  - JDK-8272772: Shenandoah: compiler/c2/aarch64/TestVolatilesShenandoah.java fails in 11u
ac0427
  - JDK-8273939: Backport of 8248414 to JDK11 breaks MacroAssembler::adrp
ac0427
ac0427
Notes on individual issues:
ac0427
===========================
ac0427
ac0427
security-libs/java.security:
ac0427
ac0427
JDK-8271434: Removed IdenTrust Root Certificate
ac0427
===============================================
ac0427
The following root certificate from IdenTrust has been removed from
ac0427
the `cacerts` keystore:
ac0427
ac0427
Alias Name: identrustdstx3 [jdk]
ac0427
Distinguished Name: CN=DST Root CA X3, O=Digital Signature Trust Co.
ac0427
ac0427
JDK-8261922: Updated keytool to Create AKID From SKID of Issuing Certificate as Specified by RFC 5280
ac0427
=====================================================================================================
ac0427
The `gencert` command of the `keytool` utility has been updated to
ac0427
create AKID from the SKID of the issuing certificate as specified by
ac0427
RFC 5280.
ac0427
ac0427
security-libs/javax.net.ssl:
ac0427
ac0427
JDK-8210799: ChaCha20 and Poly1305 TLS Cipher Suites
ac0427
====================================================
ac0427
New TLS cipher suites using the `ChaCha20-Poly1305` algorithm have
ac0427
been added to JSSE.  These cipher suites are enabled by default.  The
ac0427
TLS_CHACHA20_POLY1305_SHA256 cipher suite is available for TLS 1.3.
ac0427
The following cipher suites are available for TLS 1.2:
ac0427
ac0427
* TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
ac0427
* TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ac0427
* TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ac0427
ac0427
Refer to the "Java Secure Socket Extension (JSSE) Reference Guide" for
ac0427
details on these new TLS cipher suites.
ac0427
ac0427
JDK-8219551: Updated the Default Enabled Cipher Suites Preference
ac0427
=================================================================
ac0427
The preference of the default enabled cipher suites has been
ac0427
changed. The compatibility impact should be minimal. If needed,
ac0427
applications can customize the enabled cipher suites and the
ac0427
preference. For more details, refer to the SunJSSE provider
ac0427
documentation and the JSSE Reference Guide documentation.
ac0427
5a4eb3
New in release OpenJDK 11.0.12 (2021-07-20):
5a4eb3
=============================================
5a4eb3
Live versions of these release notes can be found at:
5a4eb3
  * https://bitly.com/openjdk11012
5a4eb3
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.12.txt
5a4eb3
5a4eb3
* Security fixes
5a4eb3
  - JDK-8256157: Improve bytecode assembly
5a4eb3
  - JDK-8256491: Better HTTP transport
5a4eb3
  - JDK-8258432, CVE-2021-2341: Improve file transfers
5a4eb3
  - JDK-8260453: Improve Font Bounding
5a4eb3
  - JDK-8260960: Signs of jarsigner signing
5a4eb3
  - JDK-8260967, CVE-2021-2369: Better jar file validation
5a4eb3
  - JDK-8262380: Enhance XML processing passes
5a4eb3
  - JDK-8262403: Enhanced data transfer
5a4eb3
  - JDK-8262410: Enhanced rules for zones
5a4eb3
  - JDK-8262477: Enhance String Conclusions
5a4eb3
  - JDK-8262967: Improve Zip file support
5a4eb3
  - JDK-8264066, CVE-2021-2388: Enhance compiler validation
5a4eb3
  - JDK-8264079: Improve abstractions
5a4eb3
  - JDK-8264460: Improve NTLM support
5a4eb3
* Other changes
5a4eb3
  - JDK-6847157: java.lang.NullPointerException: HDC for component at sun.java2d.loops.Blit.Blit
5a4eb3
  - JDK-7106851: Test should not use System.exit
5a4eb3
  - JDK-8073446: TimeZone getOffset API does not  return a dst offset between years 2038-2137
5a4eb3
  - JDK-8076190: Customizing the generation of a PKCS12 keystore
5a4eb3
  - JDK-8153005: Upgrade the default PKCS12 encryption/MAC algorithms
5a4eb3
  - JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java fails on Windows & Linux
5a4eb3
  - JDK-8177068: incomplete classpath causes NPE in Flow
5a4eb3
  - JDK-8185734: [Windows] Structured Exception Catcher missing around gtest execution
5a4eb3
  - JDK-8187450: JNI local refs exceeds capacity warning in NetworkInterface::getAll
5a4eb3
  - JDK-8190763: Class cast exception on (CompoundEdit) UndoableEditEvent.getEdit()
5a4eb3
  - JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt check for non-null terminated strings with length equal to maxLen
5a4eb3
  - JDK-8196100: javax/swing/text/JTextComponent/5074573/bug5074573.java fails
5a4eb3
  - JDK-8199646: JShell tests: jdk/jshell/FailOverDirectExecutionControlTest.java failed with java.lang.UnsupportedOperationException
5a4eb3
  - JDK-8206925: Support the certificate_authorities extension
5a4eb3
  - JDK-8207160: ClassReader::adjustMethodParams can potentially return null if the args list is empty
5a4eb3
  - JDK-8207247: AARCH64: Enable Minimal and Client VM builds
5a4eb3
  - JDK-8207404: MulticastSocket tests failing on AIX
5a4eb3
  - JDK-8207779: Method::is_valid_method() compares 'this' with NULL
5a4eb3
  - JDK-8208061: runtime/LoadClass/TestResize.java fails with "Load factor too high" when running in CDS mode.
5a4eb3
  - JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
5a4eb3
  - JDK-8210443: Migrate Locale matching tests to JDK Repo.
5a4eb3
  - JDK-8213231: ThreadSnapshot::_threadObj can become stale
5a4eb3
  - JDK-8213483: ARM32: runtime/ErrorHandling/ShowRegistersOnAssertTest.java jtreg test fail
5a4eb3
  - JDK-8213725: JShell NullPointerException due to class file with unexpected package
5a4eb3
  - JDK-8213794: ARM32: disable TypeProfiling, CriticalJNINatives, Serviceablity tests for ARM32
5a4eb3
  - JDK-8213845: ARM32: Interpreter doesn't call result handler after native calls
5a4eb3
  - JDK-8214128: ARM32: wrong stack alignment on Deoptimization::unpack_frames
5a4eb3
  - JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java fails on ARM
5a4eb3
  - JDK-8214854: JDWP: Unforseen output truncation in logging
5a4eb3
  - JDK-8214922: Add vectorization support for fmin/fmax
5a4eb3
  - JDK-8215009: GCC 8 compilation error in libjli
5a4eb3
  - JDK-8216184: CDS/appCDS tests failed on Windows due to long path to a classlist file
5a4eb3
  - JDK-8216259: AArch64: Vectorize Adler32 intrinsics
5a4eb3
  - JDK-8216314: SIGILL in CodeHeapState::print_names()
5a4eb3
  - JDK-8217348: assert(thread->is_Java_thread()) failed: just checking
5a4eb3
  - JDK-8217465: [REDO] - Optimize CodeHeap Analytics
5a4eb3
  - JDK-8217561: X86: Add floating-point Math.min/max intrinsics
5a4eb3
  - JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
5a4eb3
  - JDK-8218458: [TESTBUG] runtime/NMT/CheckForProperDetailStackTrace.java fails with Expected stack trace missing from output
5a4eb3
  - JDK-8219142: Remove unused JIMAGE_ResourcePath
5a4eb3
  - JDK-8219586: CodeHeap State Analytics processes dead nmethods
5a4eb3
  - JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
5a4eb3
  - JDK-8220407: compiler/intrinsics/math/TestFpMinMaxIntrinsics.java timedout
5a4eb3
  - JDK-8222302: [TESTBUG]test/hotspot/jtreg/compiler/intrinsics/sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any other CPU
5a4eb3
  - JDK-8222412: AARCH64: multiple instructions encoding issues
5a4eb3
  - JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns into separate instructions
5a4eb3
  - JDK-8223444: Improve CodeHeap Free Space Management
5a4eb3
  - JDK-8223504: Improve performance of forall loops by better inlining of "iterator()" methods
5a4eb3
  - JDK-8223667: ASAN build broken
5a4eb3
  - JDK-8225081: Remove Telia Company CA certificate expiring in April 2021
5a4eb3
  - JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
5a4eb3
  - JDK-8225438: javax/net/ssl/TLSCommon/TestSessionLocalPrincipal.java failed with Read timed out
5a4eb3
  - JDK-8225756: [testbug] compiler/loopstripmining/CheckLoopStripMining.java sets too short a SafepointTimeoutDelay
5a4eb3
  - JDK-8226374: Restrict TLS signature schemes and named groups
5a4eb3
  - JDK-8226627: assert(t->singleton()) failed: must be a constant
5a4eb3
  - JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
5a4eb3
  - JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
5a4eb3
  - JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/Loops04.java failed XMM register should be 0-15
5a4eb3
  - JDK-8227609: (fs) Files.newInputStream(...).skip(n) should allow skipping beyond file size
5a4eb3
  - JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
5a4eb3
  - JDK-8231460: Performance issue (CodeHeap) with large free blocks
5a4eb3
  - JDK-8231713: x86_32 build failures after JDK-8226721 (Missing intrinsics for Math.ceil, floor, rint)
5a4eb3
  - JDK-8231841: AArch64: debug.cpp help() is missing an AArch64 line for pns
5a4eb3
  - JDK-8232084: HotSpot build failed with GCC 9.2.1
5a4eb3
  - JDK-8232591: AArch64: Add missing match rules for smaddl, smsubl and smnegl
5a4eb3
  - JDK-8233185: HttpServer.stop() blocks indefinitely when called on dispatch thread
5a4eb3
  - JDK-8233787: Break cycle in vm_version* includes
5a4eb3
  - JDK-8233948: AArch64: Incorrect mapping between OptoReg and VMReg for high 64 bits of Vector Register
5a4eb3
  - JDK-8234355: Buffer overflow in jcmd GC.class_stats due to too many classes
5a4eb3
  - JDK-8235368: Update BCEL to Version 6.4.1
5a4eb3
  - JDK-8236859: WebSocket over authenticating proxy fails with NPE
5a4eb3
  - JDK-8236992: AArch64: remove redundant load_klass in itable stub
5a4eb3
  - JDK-8237743: test/langtools/jdk/jshell/FailOverExecutionControlTest.java fails No ExecutionControlProvider with name 'nonExistent' and parameter keys: []
5a4eb3
  - JDK-8237804: sun/security/mscapi tests fail with "Key pair not generated, alias <nnnnnn> already exists"
5a4eb3
  - JDK-8238175: CTW: Class.getDeclaredMethods fails with assert(k->is_subclass_of(SystemDictionary::Throwable_klass())) failed: invalid exception class
5a4eb3
  - JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong handling of stoppedMixers
5a4eb3
  - JDK-8238812: assert(false) failed: bad AD file
5a4eb3
  - JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/NSTexturedJFrame.java
5a4eb3
  - JDK-8239386: handle ContendedPaddingWidth in vm_version_aarch64
5a4eb3
  - JDK-8239536: Can't use `java.util.List` object after importing `java.awt.List`
5a4eb3
  - JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
5a4eb3
  - JDK-8240848: ArrayIndexOutOfBoundsException buf for TextCallbackHandler
5a4eb3
  - JDK-8241082: Upgrade IANA Language Subtag Registry data to 03-16-2020 version
5a4eb3
  - JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039 and C2873
5a4eb3
  - JDK-8241101: [s390] jtreg test failure after JDK-8238696: not conformant features string
5a4eb3
  - JDK-8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93)
5a4eb3
  - JDK-8241372: Several test failures due to javax.net.ssl.SSLException: Connection reset
5a4eb3
  - JDK-8241475: AArch64: Add missing support for PopCountVI node
5a4eb3
  - JDK-8241829: Cleanup the code for PrinterJob on windows
5a4eb3
  - JDK-8241960: The SHA3 message digests impl of SUN provider are not thread safe after cloned
5a4eb3
  - JDK-8242010: Upgrade IANA Language Subtag Registry to Version 2020-04-01
5a4eb3
  - JDK-8242429: Better implementation for sign extract
5a4eb3
  - JDK-8242557: Add length limit for strings in PNGImageWriter
5a4eb3
  - JDK-8242919: Paste locks up jshell
5a4eb3
  - JDK-8243155: AArch64: Add support for SqrtVF
5a4eb3
  - JDK-8243240: AArch64: Add support for MulVB
5a4eb3
  - JDK-8243452: JFR: Could not create chunk in repository with over 200 recordings
5a4eb3
  - JDK-8243559: Remove root certificates with 1024-bit keys
5a4eb3
  - JDK-8243597: AArch64: Add support for integer vector abs
5a4eb3
  - JDK-8244031: HttpClient should have more tests for HEAD requests
5a4eb3
  - JDK-8244205: HTTP/2 tunnel connections through proxy may be reused regardless of which proxy is selected
5a4eb3
  - JDK-8244847: Linux/PPC: runtime/CompressedOops/CompressedClassPointers: smallHeapTest fails
5a4eb3
  - JDK-8245511: G1 adaptive IHOP does not account for reclamation of humongous objects by young GC
5a4eb3
  - JDK-8246274: G1 old gen allocation tracking is not in a separate class
5a4eb3
  - JDK-8247354: [aarch64] PopFrame causes assert(oopDesc::is_oop(obj)) failed: not an oop
5a4eb3
  - JDK-8247408: IdealGraph bit check expression canonicalization
5a4eb3
  - JDK-8247432: Update IANA Language Subtag Registry to Version 2020-09-29
5a4eb3
  - JDK-8247438: JShell: When FailOverExecutionControlProvider fails the proximal cause is not shown
5a4eb3
  - JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns wrong value on Fedora 32
5a4eb3
  - JDK-8248043: Need to eliminate excessive i2l conversions
5a4eb3
  - JDK-8248411: [aarch64] Insufficient error handling when CodeBuffer is exhausted
5a4eb3
  - JDK-8248568: compiler/c2/TestBit.java failed: test missing from stdout/stderr
5a4eb3
  - JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for masked positive values
5a4eb3
  - JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is unstable
5a4eb3
  - JDK-8249189: AARCH64: more L2I conversions can be skipped
5a4eb3
  - JDK-8249719: MethodHandle performance suffers from bad ResolvedMethodTable hash function
5a4eb3
  - JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
5a4eb3
  - JDK-8250635: MethodArityHistogram should use Compile_lock in favour of fancy checks
5a4eb3
  - JDK-8250876: Fix issues with cross-compile on macos
5a4eb3
  - JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean tests fail with hostnames starting from digits
5a4eb3
  - JDK-8251525: AARCH64: Faster Math.signum(fp)
5a4eb3
  - JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
5a4eb3
  - JDK-8252311: AArch64: save two words in itable lookup stub
5a4eb3
  - JDK-8252779: compiler/graalunit/HotspotTest.java failed after 8251525
5a4eb3
  - JDK-8252883: AccessDeniedException caused by delayed file deletion on Windows
5a4eb3
  - JDK-8253167: ARM32 builds fail after JDK-8247910
5a4eb3
  - JDK-8253572: [windows] CDS archive may fail to open with long file names
5a4eb3
  - JDK-8253923: C2 doesn't always run loop opts for compilations that include loops
5a4eb3
  - JDK-8253948: Memory leak in ImageFileReader
5a4eb3
  - JDK-8254631: Better support ALPN byte wire values in SunJSSE
5a4eb3
  - JDK-8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
5a4eb3
  - JDK-8255086: Update the root locale display names
5a4eb3
  - JDK-8255625: AArch64: Implement Base64.encodeBlock accelerator/intrinsic
5a4eb3
  - JDK-8255763: C2: OSR miscompilation caused by invalid memory instruction placement
5a4eb3
  - JDK-8255992: JFR EventWriter does not use first string from StringPool with id 0
5a4eb3
  - JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/PortUnreachable.java fails due to the hard coded threshold is small
5a4eb3
  - JDK-8256244: java/lang/ProcessHandle/PermissionTest.java fails with TestNG 7.1
5a4eb3
  - JDK-8256287: [windows] add loop fuse to map_or_reserve_memory_aligned
5a4eb3
  - JDK-8256523: Streamline Java SHA2 implementation
5a4eb3
  - JDK-8257414: Drag n Drop target area is wrong on high DPI systems
5a4eb3
  - JDK-8257569: Failure observed with JfrVirtualMemory::initialize
5a4eb3
  - JDK-8257574: C2: "failed: parsing found no loops but there are some" assert failure
5a4eb3
  - JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
5a4eb3
  - JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
5a4eb3
  - JDK-8257621: JFR StringPool misses cached items across consecutive recordings
5a4eb3
  - JDK-8257796: [TESTBUG] TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on x86_32
5a4eb3
  - JDK-8257822: C2 crashes with SIGFPE due to a division that floats above its zero check
5a4eb3
  - JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
5a4eb3
  - JDK-8257853: Remove dependencies on JNF's JNI utility functions in AWT and 2D code
5a4eb3
  - JDK-8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
5a4eb3
  - JDK-8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m
5a4eb3
  - JDK-8257988: Remove JNF dependency from libsaproc/MacosxDebuggerLocal.m
5a4eb3
  - JDK-8258414: OldObjectSample events too expensive
5a4eb3
  - JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due to missing UnlockDiagnosticVMOptions
5a4eb3
  - JDK-8258753: StartTlsResponse.close() hangs due to synchronization issues
5a4eb3
  - JDK-8259061: C2: assert(found) failed: memory-writing node is not placed in its original loop or an ancestor of it
5a4eb3
  - JDK-8259227: C2 crashes with SIGFPE due to a division that floats above its zero check
5a4eb3
  - JDK-8259232: Bad JNI lookup during printing
5a4eb3
  - JDK-8259276: C2: Empty expression stack when reexecuting tableswitch/lookupswitch instructions after deoptimization
5a4eb3
  - JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
5a4eb3
  - JDK-8259585: Accessible actions do not work on mac os x
5a4eb3
  - JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
5a4eb3
  - JDK-8259662: Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
5a4eb3
  - JDK-8259710: Inlining trace leaks memory
5a4eb3
  - JDK-8259729: Missed JNFInstanceOf -> IsInstanceOf conversion
5a4eb3
  - JDK-8259777: Incorrect predication condition generated by ADLC
5a4eb3
  - JDK-8259786: initialize last parameter of getpwuid_r
5a4eb3
  - JDK-8259843: initialize dli_fname array before calling dll_address_to_library_name
5a4eb3
  - JDK-8259869: [macOS] Remove desktop module dependencies on JNF Reference APIs
5a4eb3
  - JDK-8259886: Improve SSL session cache performance and scalability
5a4eb3
  - JDK-8259983: do not use uninitialized expand_ms value in G1CollectedHeap::expand_heap_after_young_collection
5a4eb3
  - JDK-8260030: Improve stringStream buffer handling
5a4eb3
  - JDK-8260236: better init AnnotationCollector _contended_group
5a4eb3
  - JDK-8260255: C1: LoopInvariantCodeMotion constructor can leave some fields uninitialized
5a4eb3
  - JDK-8260284: C2: assert(_base == Int) failed: Not an Int
5a4eb3
  - JDK-8260380: Upgrade to LittleCMS 2.12
5a4eb3
  - JDK-8260420: C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint
5a4eb3
  - JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak memory
5a4eb3
  - JDK-8260432: allocateSpaceForGP in freetypeScaler.c might leak memory
5a4eb3
  - JDK-8260616: Removing remaining JNF dependencies in the java.desktop module
5a4eb3
  - JDK-8260653: Unreachable nodes keep speculative types alive
5a4eb3
  - JDK-8260707: java/lang/instrument/PremainClass/InheritAgent0100.java times out
5a4eb3
  - JDK-8260925: HttpsURLConnection does not work  with other JSSE provider.
5a4eb3
  - JDK-8260926: Trace resource exhausted events unconditionally
5a4eb3
  - JDK-8261020: Wrong format parameter in create_emergency_chunk_path
5a4eb3
  - JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
5a4eb3
  - JDK-8261167: print_process_memory_info add a close call after fopen
5a4eb3
  - JDK-8261170: Upgrade to freetype 2.10.4
5a4eb3
  - JDK-8261198: [macOS] Incorrect JNI parameters in number conversion in A11Y code
5a4eb3
  - JDK-8261235: C1 compilation fails with assert(res->vreg_number() == index) failed: conversion check
5a4eb3
  - JDK-8261261: The version extra fields needs to be overridable in jib-profiles.js
5a4eb3
  - JDK-8261262: Kitchensink24HStress.java crashed with EXCEPTION_ACCESS_VIOLATION
5a4eb3
  - JDK-8261354: SIGSEGV at MethodIteratorHost
5a4eb3
  - JDK-8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding
5a4eb3
  - JDK-8261397: try catch Method failing to work when dividing an integer by 0
5a4eb3
  - JDK-8261422: Adjust problematic String.format calls in jdk/internal/util/Preconditions.java outOfBoundsMessage
5a4eb3
  - JDK-8261447: MethodInvocationCounters frequently run into overflow
5a4eb3
  - JDK-8261481: Cannot read Kerberos settings in dynamic store on macOS Big Sur
5a4eb3
  - JDK-8261505: Test test/hotspot/jtreg/gc/parallel/TestDynShrinkHeap.java killed by Linux OOM Killer
5a4eb3
  - JDK-8261601: free memory in early return in Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
5a4eb3
  - JDK-8261649: AArch64: Optimize LSE atomics in C++ code
5a4eb3
  - JDK-8261730: C2 compilation fails with assert(store->find_edge(load) != -1) failed: missing precedence edge
5a4eb3
  - JDK-8261752: Multiple GC test are missing memory requirements
5a4eb3
  - JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c potential leaks
5a4eb3
  - JDK-8261812: C2 compilation fails with assert(!had_error) failed: bad dominance
5a4eb3
  - JDK-8261914: IfNode::fold_compares_helper faces non-canonicalized bool when running JRuby JSON workload
5a4eb3
  - JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java failed "assert(false) failed: unexpected node"
5a4eb3
  - JDK-8262110: DST starts from incorrect time in 2038
5a4eb3
  - JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have line number 0
5a4eb3
  - JDK-8262163: Extend settings printout in jcmd VM.metaspace
5a4eb3
  - JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
5a4eb3
  - JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with assert "bad barrier shape"
5a4eb3
  - JDK-8262446: DragAndDrop hangs on Windows
5a4eb3
  - JDK-8262461: handle wcstombsdmp return value correctly in unix awt_InputMethod.c
5a4eb3
  - JDK-8262465: Very long compilation times and high memory consumption in C2 debug builds
5a4eb3
  - JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt stack
5a4eb3
  - JDK-8262739: String inflation C2 intrinsic prevents insertion of anti-dependencies
5a4eb3
  - JDK-8262829: Native crash in Win32PrintServiceLookup.getAllPrinterNames()
5a4eb3
  - JDK-8262837: handle split_USE correctly
5a4eb3
  - JDK-8262900: ToolBasicTest fails to access HTTP server it starts
5a4eb3
  - JDK-8263260: [s390] Support latest hardware (z14 and z15)
5a4eb3
  - JDK-8263311: Watch registry changes for remote printers update instead of polling
5a4eb3
  - JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB collectors
5a4eb3
  - JDK-8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
5a4eb3
  - JDK-8263425: AArch64: two potential bugs in C1 LIRGenerator::generate_address()
5a4eb3
  - JDK-8263448: CTW: fatal error: meet not symmetric
5a4eb3
  - JDK-8263504: Some OutputMachOpcodes fields are uninitialized
5a4eb3
  - JDK-8263557: Possible NULL dereference in Arena::destruct_contents()
5a4eb3
  - JDK-8263558: Possible NULL dereference in fast path arena free if ZapResourceArea is true
5a4eb3
  - JDK-8263676: AArch64: one potential bug in C1 LIRGenerator::generate_address()
5a4eb3
  - JDK-8263729: [test] divert spurious output away from stream under test in ProcessBuilder Basic test
5a4eb3
  - JDK-8263846: Bad JNI lookup getFocusOwner in accessibility code on Mac OS X
5a4eb3
  - JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg and libawt
5a4eb3
  - JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match rule is not supported
5a4eb3
  - JDK-8264151: ciMethod::ensure_method_data() should return false is loading resulted in empty state
5a4eb3
  - JDK-8264173: [s390] Improve Hardware Feature Detection And Reporting
5a4eb3
  - JDK-8264190: Harden TLS interop tests
5a4eb3
  - JDK-8264223: CodeHeap::verify fails extra_hops assertion in fastdebug test
5a4eb3
  - JDK-8264328: Broken license in javax/swing/JComboBox/8072767/bug8072767.java
5a4eb3
  - JDK-8264360: Loop strip mining verification fails with "should be on the backedge"
5a4eb3
  - JDK-8264626: C1 should be able to inline excluded methods
5a4eb3
  - JDK-8264640: CMS ParScanClosure misses a barrier
5a4eb3
  - JDK-8264786: [macos] All Swing/AWT apps cause Allow Notifications prompt to appear when app is launched
5a4eb3
  - JDK-8264821: DirectIOTest fails on a system with large block size
5a4eb3
  - JDK-8264848: [macos] libjvm.dylib linker warning due to macOS version mismatch
5a4eb3
  - JDK-8264923: PNGImageWriter.write_zTXt throws Exception with a typo
5a4eb3
  - JDK-8264958: C2 compilation fails with assert "n is later than its clone"
5a4eb3
  - JDK-8265099: Revert backport to 11u of 8236859: WebSocket over authenticating proxy fails with NPE
5a4eb3
  - JDK-8265154: vinserti128 operand mix up for KNL platforms
5a4eb3
  - JDK-8265239: Shenandoah: Shenandoah heap region count could be off by 1
5a4eb3
  - JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
5a4eb3
  - JDK-8265421: java/lang/String/StringRepeat.java test is missing a memory requirement
5a4eb3
  - JDK-8265462: Handle multiple slots in the NSS Internal Module from SunPKCS11's Secmod
5a4eb3
  - JDK-8265537: x86 version string truncated after JDK-8249672 11u backport
5a4eb3
  - JDK-8265666: Enable AIX build platform to make external debug symbols
5a4eb3
  - JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work() lacks storestore barrier
5a4eb3
  - JDK-8265690: Use the latest Ubuntu base image version in Docker testing
5a4eb3
  - JDK-8265718: Build failure after JDK-8258414 11u backport
5a4eb3
  - JDK-8265750: Fatal error in safepoint.cpp after backport of 8258414
5a4eb3
  - JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs behind
5a4eb3
  - JDK-8265938: C2's conditional move optimization does not handle top Phi
5a4eb3
  - JDK-8266220: keytool still prompt for store password on a password-less pkcs12 file if -storetype pkcs12 is specified
5a4eb3
  - JDK-8266293: Key protection using PBEWithMD5AndDES fails with "java.security.InvalidAlgorithmParameterException: Salt must be 8 bytes long"
5a4eb3
  - JDK-8266713: [AIX] Build failure after 11u backport of JDK-8247753
5a4eb3
  - JDK-8266802: Shenandoah: Round up region size to page size unconditionally
5a4eb3
  - JDK-8266892: avoid maybe-uninitialized gcc warnings on linux s390x
5a4eb3
  - JDK-8266929: Unable to use algorithms from 3p providers
5a4eb3
  - JDK-8267235: [macos_aarch64] InterpreterRuntime::throw_pending_exception messing up LR results in crash
5a4eb3
  - JDK-8267561: Shenandoah: Reference processing not properly setup for outside of cycle degenerated GC
5a4eb3
  - JDK-8267599: Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u
5a4eb3
  - JDK-8267641: [11u] 8227609 backport typo
5a4eb3
  - JDK-8267721: Enable sun/security/pkcs11 tests for Amazon Linux 2 AArch64
5a4eb3
  - JDK-8268678: LetsEncryptCA.java test fails as Let’s Encrypt Authority X3 is retired
5a4eb3
5a4eb3
Notes on individual issues:
5a4eb3
===========================
5a4eb3
5a4eb3
security-libs/java.security:
5a4eb3
5a4eb3
JDK-8215293: Customizing PKCS12 keystore Generation
5a4eb3
===================================================
5a4eb3
New system and security properties have been added to enable users to
5a4eb3
customize the generation of PKCS #12 keystores. This includes
5a4eb3
algorithms and parameters for key protection, certificate protection,
5a4eb3
and MacData. The detailed explanation and possible values for these
5a4eb3
properties can be found in the "PKCS12 KeyStore properties" section of
5a4eb3
the `java.security` file.
5a4eb3
5a4eb3
Also, support for the following SHA-2 based HmacPBE algorithms has
5a4eb3
been added to the SunJCE provider:
5a4eb3
5a4eb3
* HmacPBESHA224
5a4eb3
* HmacPBESHA256
5a4eb3
* HmacPBESHA384
5a4eb3
* HmacPBESHA512
5a4eb3
* HmacPBESHA512/224
5a4eb3
* HmacPBESHA512/256
5a4eb3
5a4eb3
JDK-8256902: Removed Root Certificates with 1024-bit Keys
5a4eb3
=========================================================
5a4eb3
The following root certificates with weak 1024-bit RSA public keys
5a4eb3
have been removed from the `cacerts` keystore:
5a4eb3
5a4eb3
Alias Name: thawtepremiumserverca [jdk]
5a4eb3
Distinguished Name: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
5a4eb3
5a4eb3
Alias Name: verisignclass2g2ca [jdk]
5a4eb3
Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
5a4eb3
5a4eb3
Alias Name: verisignclass3ca [jdk]
5a4eb3
Distinguished Name: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
5a4eb3
5a4eb3
Alias Name: verisignclass3g2ca [jdk]
5a4eb3
Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
5a4eb3
5a4eb3
Alias Name: verisigntsaca [jdk]
5a4eb3
Distinguished Name: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA
5a4eb3
5a4eb3
JDK-8261361: Removed Telia Company's Sonera Class2 CA certificate
5a4eb3
=================================================================
5a4eb3
5a4eb3
The following root certificate have been removed from the cacerts truststore:
5a4eb3
5a4eb3
Alias Name: soneraclass2ca
5a4eb3
Distinguished Name: CN=Sonera Class2 CA, O=Sonera, C=FI
5a4eb3
5a4eb3
JDK-8242069: Upgraded the Default PKCS12 Encryption and MAC Algorithms
5a4eb3
======================================================================
5a4eb3
The default encryption and MAC algorithms used in a PKCS #12 keystore
5a4eb3
have been updated. The new algorithms are based on AES-256 and SHA-256
5a4eb3
and are stronger than the old algorithms that were based on RC2,
5a4eb3
DESede, and SHA-1. See the security properties starting with
5a4eb3
`keystore.pkcs12` in the `java.security` file for detailed
5a4eb3
information.
5a4eb3
5a4eb3
For compatibility, a new system property named
5a4eb3
`keystore.pkcs12.legacy` is defined that will revert the algorithms to
5a4eb3
use the older, weaker algorithms. There is no value defined for this
5a4eb3
property.
5a4eb3
5a4eb3
security-libs/javax.net.ssl:
5a4eb3
5a4eb3
JDK-8257548: Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values
5a4eb3
=========================================================================================
5a4eb3
Certain TLS ALPN values couldn't be properly read or written by the
5a4eb3
SunJSSE provider. This is due to the choice of Strings as the API
5a4eb3
interface and the undocumented internal use of the UTF-8 Character Set
5a4eb3
which converts characters larger than U+00007F (7-bit ASCII) into
5a4eb3
multi-byte arrays that may not be expected by a peer.
5a4eb3
5a4eb3
ALPN values are now represented using the network byte representation
5a4eb3
expected by the peer, which should require no modification for
5a4eb3
standard 7-bit ASCII-based character Strings. However, SunJSSE now
5a4eb3
encodes/decodes String characters as 8-bit ISO_8859_1/LATIN-1
5a4eb3
characters.  This means applications that used characters above
5a4eb3
U+000007F that were previously encoded using UTF-8 may need to either
5a4eb3
be modified to perform the UTF-8 conversion, or set the Java security
5a4eb3
property `jdk.tls.alpnCharset` to "UTF-8" revert the behavior.
5a4eb3
5a4eb3
See the updated guide at
5a4eb3
https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/alpn.html
5a4eb3
for more information.
5a4eb3
5a4eb3
JDK-8244460: Support for certificate_authorities Extension
5a4eb3
==========================================================
5a4eb3
The "certificate_authorities" extension is an optional extension
5a4eb3
introduced in TLS 1.3. It is used to indicate the certificate
5a4eb3
authorities (CAs) that an endpoint supports and should be used by the
5a4eb3
receiving endpoint to guide certificate selection.
5a4eb3
5a4eb3
With this JDK release, the "certificate_authorities" extension is
5a4eb3
supported for TLS 1.3 in both the client and the server sides.  This
5a4eb3
extension is always present for client certificate selection, while it
5a4eb3
is optional for server certificate selection.
5a4eb3
5a4eb3
Applications can enable this extension for server certificate
5a4eb3
selection by setting the `jdk.tls.client.enableCAExtension` system
5a4eb3
property to `true`.  The default value of the property is `false`.
5a4eb3
5a4eb3
Note that if the client trusts more CAs than the size limit of the
5a4eb3
extension (less than 2^16 bytes), the extension is not enabled.  Also,
5a4eb3
some server implementations do not allow handshake messages to exceed
5a4eb3
2^14 bytes.  Consequently, there may be interoperability issues when
5a4eb3
`jdk.tls.client.enableCAExtension` is set to `true` and the client
5a4eb3
trusts more CAs than the server implementation limit.
5a4eb3
438e03
New in release OpenJDK 11.0.11 (2021-04-20):
438e03
=============================================
438e03
Live versions of these release notes can be found at:
438e03
  * https://bitly.com/openjdk11011
438e03
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.11.txt
438e03
438e03
* Security fixes
438e03
  - JDK-8244473: Contextualize registration for JNDI
438e03
  - JDK-8244543: Enhanced handling of abstract classes
438e03
  - JDK-8249906, CVE-2021-2163: Enhance opening JARs
438e03
  - JDK-8250568, CVE-2021-2161: Less ambiguous processing
438e03
  - JDK-8253799: Make lists of normal filenames
438e03
  - JDK-8257001: Improve Http Client Support
438e03
* Other changes
438e03
  - JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream readDouble() conversion to long mishandled
438e03
  - JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection
438e03
  - JDK-8086003: Test fails on OSX with java.lang.RuntimeException 'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3' missing
438e03
  - JDK-8168869: jdeps: localized messages don't use proper line breaks
438e03
  - JDK-8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
438e03
  - JDK-8202343: Disable TLS 1.0 and 1.1
438e03
  - JDK-8205992: jhsdb cannot attach to Java processes running in Docker containers
438e03
  - JDK-8209193: Fix aarch64-linux compilation after -Wreorder changes
438e03
  - JDK-8210413: AArch64: Optimize div/rem by constant in C1
438e03
  - JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
438e03
  - JDK-8211051: jdeps usage of --dot-output doesn't provide valid output for modular jar
438e03
  - JDK-8211057: Gensrc step CompileProperties generates unstable CompilerProperties output
438e03
  - JDK-8211150: G1 Full GC not purging code root memory and hence causing memory leak
438e03
  - JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup delegation when module reads automatic module
438e03
  - JDK-8212043: Add floating-point Math.min/max intrinsics
438e03
  - JDK-8212218: [TESTBUG] runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
438e03
  - JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/WindowsComboBoxSizeTest.java fails in Windows
438e03
  - JDK-8213909: jdeps --print-module-deps should report missing dependences
438e03
  - JDK-8214180: Need better granularity for sleeping
438e03
  - JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed due to missing Lib2 file
438e03
  - JDK-8214230: Classes generated by SystemModulesPlugin.java are not reproducable
438e03
  - JDK-8214741: docs/index.html has no title or copyright
438e03
  - JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed after 8212043
438e03
  - JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003/TestDescription.java fails
438e03
  - JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java failed - no KrbException thrown
438e03
  - JDK-8218550: Add test omitted from JDK-8212043
438e03
  - JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in JvmtiRawMonitor::raw_exit while posting method exit event
438e03
  - JDK-8221995: AARCH64: problems with CAS instructions encoding
438e03
  - JDK-8222518: Remove unnecessary caching of Parker object in java.lang.Thread
438e03
  - JDK-8222785: aarch64: add necessary masking for immediate shift counts
438e03
  - JDK-8223186: HotSpot compile warnings from GCC 9
438e03
  - JDK-8225773: jdeps --check produces NPE if there are missing module dependences
438e03
  - JDK-8225805: Java Access Bridge does not close the logger
438e03
  - JDK-8226810: Failed to launch JVM because of NullPointerException occured on System.props
438e03
  - JDK-8229396: jdeps ignores multi-release when generate-module-info used on command line
438e03
  - JDK-8229474: Shenandoah: Cleanup CM::update_roots()
438e03
  - JDK-8232225: Rework the fix for JDK-8071483
438e03
  - JDK-8232905: JFR fails with assertion: assert(t->unflushed_size() == 0) failed: invariant
438e03
  - JDK-8233164: C2 fails with assert(phase->C->get_alias_index(t) == phase->C->get_alias_index(t_adr)) failed: correct memory chain
438e03
  - JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is failing intermittently in nightly lnux-x64 system
438e03
  - JDK-8233912: aarch64: minor improvements of atomic operations
438e03
  - JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads non-strong fields with an on-strong load barrier
438e03
  - JDK-8234742: Improve handshake logging
438e03
  - JDK-8234796: Refactor Handshake::execute to take a more complex type than ThreadClosure
438e03
  - JDK-8235324: Dying objects are published from users of CollectedHeap::object_iterate
438e03
  - JDK-8235351: Lookup::unreflect should bind with the original caller independent of Method's accessible flag
438e03
  - JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/AttachOnDemand/attach021/TestDescription.java test
438e03
  - JDK-8237392: Shenandoah: Remove unreliable assertion
438e03
  - JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
438e03
  - JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7
438e03
  - JDK-8239355: (dc) Initial value of SO_SNDBUF should allow sending large datagrams (macOS)
438e03
  - JDK-8240353: AArch64: missing support for -XX:+ExtendedDTraceProbes in C1
438e03
  - JDK-8240704: CheckHandles.java failed "AssertionError: Handle use increased by more than 10 percent."
438e03
  - JDK-8240751: Shenandoah: fold ShenandoahTracer definition
438e03
  - JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with "assert(store != load->find_exact_control(load->in(0))) failed: dependence cycle found"
438e03
  - JDK-8241598: Upgrade JLine to 3.14.0
438e03
  - JDK-8241649: Optimize Character.toString
438e03
  - JDK-8241770: Module xxxAnnotation() methods throw NCDFE if module-info.class found as resource in unnamed module
438e03
  - JDK-8241911: AArch64: Fix a potential register clash issue in reduce_add2I
438e03
  - JDK-8242030: Wrong package declarations in jline classes after JDK-8241598
438e03
  - JDK-8242565: Policy initialization issues when the denyAfter constraint is enabled
438e03
  - JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
438e03
  - JDK-8243670: Unexpected test result caused by C2 MergeMemNode::Ideal
438e03
  - JDK-8244088: [Regression] Switch of Gnome theme ends up in deadlocked UI
438e03
  - JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files
438e03
  - JDK-8244340: Handshake processing thread lacks yielding
438e03
  - JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown for malformed class file
438e03
  - JDK-8244683: A TSA server used by tests
438e03
  - JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java failed with No enum constant
438e03
  - JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is unused
438e03
  - JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco agent
438e03
  - JDK-8245512: CRC32 optimization using AVX512 instructions
438e03
  - JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos
438e03
  - JDK-8246707: (sc) SocketChannel.read/write throws AsynchronousCloseException on closed channel
438e03
  - JDK-8246709: sun/security/tools/jarsigner/TsacertOptionTest.java compilation failed after JDK-8244683
438e03
  - JDK-8247200: assert((unsigned)fpargs < 32)
438e03
  - JDK-8247766: [aarch64] guarantee(val < (1U << nbits)) failed: Field too big for insn.
438e03
  - JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
438e03
  - JDK-8248865: Document JNDI/LDAP timeout properties
438e03
  - JDK-8248901: Signed immediate support in .../share/assembler.hpp is broken.
438e03
  - JDK-8249543: Force DirectBufferAllocTest to run with -ExplicitGCInvokesConcurrent
438e03
  - JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
438e03
  - JDK-8249749: modify a primitive array through a stream and a for cycle causes jre crash
438e03
  - JDK-8249787: Make TestGCLocker more resilient with concurrent GCs
438e03
  - JDK-8249867: xml declaration is not followed by a newline
438e03
  - JDK-8250911: [windows] os::pd_map_memory() error detection broken
438e03
  - JDK-8251255: [linux] Add process-memory information to hs-err and VM.info
438e03
  - JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier
438e03
  - JDK-8251925: C2: RenaissanceStressTest fails with assert(!had_error): bad dominance
438e03
  - JDK-8251944: Add Shenandoah test config to compiler/gcbarriers/UnsafeIntrinsicsTest.java
438e03
  - JDK-8251992: VM crashed running TestComplexAddrExpr.java test with -XX:UseAVX=X
438e03
  - JDK-8253220: Epsilon: clean up unused code/declarations
438e03
  - JDK-8253274: The CycleDMImagetest brokes the system
438e03
  - JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
438e03
  - JDK-8253368: TLS connection always receives close_notify exception
438e03
  - JDK-8255368: Math.exp() gives wrong result for large values on x86 32-bit platforms
438e03
  - JDK-8255401: Shenandoah: Allow oldval and newval registers to overlap in cmpxchg_oop()
438e03
  - JDK-8253404: C2: assert(C->live_nodes() <= C->max_node_limit()) failed: Live Node limit exceeded limit
438e03
  - JDK-8253409: Double-rounding possibility in float fma
438e03
  - JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities
438e03
  - JDK-8253524: C2: Refactor code that clones predicates during loop unswitching
438e03
  - JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff)) failed: unexpected
438e03
  - JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/MouseEventAfterStartDragTest.html test failed
438e03
  - JDK-8253702: BigSur version number reported as 10.16, should be 11.nn
438e03
  - JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
438e03
  - JDK-8254104: MethodCounters must exist before nmethod is installed
438e03
  - JDK-8254734: "dead loop detected" assert failure with patch from 8223051
438e03
  - JDK-8254748: Bad Copyright header format after JDK-8212218
438e03
  - JDK-8254799: runtime/ErrorHandling/TestHeapDumpOnOutOfMemoryError.java fails with release VMs
438e03
  - JDK-8255058: C1: assert(is_virtual()) failed: type check
438e03
  - JDK-8255351: Add detection for Graviton 2 CPUs
438e03
  - JDK-8255387: Japanese characters were printed upside down on AIX
438e03
  - JDK-8255479: [aarch64] assert(src->section_index_of(target) == CodeBuffer::SECT_NONE) failed: sanity
438e03
  - JDK-8255544: Create a checked cast
438e03
  - JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI()
438e03
  - JDK-8255681: print callstack in error case in runAWTLoopWithApp
438e03
  - JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
438e03
  - JDK-8255742: PrintInlining as compiler directive doesn't print virtual calls
438e03
  - JDK-8255845: Memory leak in imageFile.cpp
438e03
  - JDK-8255880: UI of Swing components is not redrawn after their internal state changed
438e03
  - JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem
438e03
  - JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset() is incorrect for stub calls
438e03
  - JDK-8256056: Deoptimization stub doesn't save vector registers on x86
438e03
  - JDK-8256061: RegisterSaver::save_live_registers() omits upper halves of ZMM0-15 registers
438e03
  - JDK-8256187: [TEST_BUG] Automate bug4275046.java test
438e03
  - JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after JDK-8210764 due to mishandled lir_neg
438e03
  - JDK-8256258: some missing NULL checks or asserts after CodeCache::find_blob_unsafe
438e03
  - JDK-8256264: Printed GlyphVector outline with low DPI has bad quality on Windows
438e03
  - JDK-8256290: javac/lambda/T8031967.java fails with StackOverflowError on x86_32
438e03
  - JDK-8256359: AArch64: runtime/ReservedStack/ReservedStackTestCompiler.java fails
438e03
  - JDK-8256387: Unexpected result if patching an entire instruction on AArch64
438e03
  - JDK-8256421: Add 2 HARICA roots to cacerts truststore
438e03
  - JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for small copies in StubGenerator::copy_memory
438e03
  - JDK-8256489: Make gtest for long path names on Windows more resilient in the presence of virus scanners
438e03
  - JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2
438e03
  - JDK-8256633: Fix product build on Windows+Arm64
438e03
  - JDK-8256682: JDK-8202343 is incomplete
438e03
  - JDK-8256751: Incremental rebuild with precompiled header fails when touching a header file
438e03
  - JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset() for CallLeafNoFP on x86_32
438e03
  - JDK-8256806: Shenandoah: optimize shenandoah/jni/TestPinnedGarbage.java test
438e03
  - JDK-8256807: C2: Not marking stores correctly as mismatched in string opts
438e03
  - JDK-8256810: Incremental rebuild broken on Macosx
438e03
  - JDK-8256818: SSLSocket that is never bound or connected leaks socket resources
438e03
  - JDK-8256888: Client manual test problem list update
438e03
  - JDK-8257083: Security infra test failures caused by JDK-8202343
438e03
  - JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
438e03
  - JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
438e03
  - JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst.testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps is on
438e03
  - JDK-8257513: C2: assert((constant_addr - _masm.code()->consts()->start()) == con.offset())
438e03
  - JDK-8257547: Handle multiple prereqs on the same line in deps files
438e03
  - JDK-8257561: Some code is not vectorized after 8251925 and 8250607
438e03
  - JDK-8257565: epsilonBarrierSet.hpp should not include barrierSetAssembler
438e03
  - JDK-8257575: C2: "failed: only phis" assert failure in loop strip mining verification
438e03
  - JDK-8257594: C2 compiled checkcast of non-null object triggers endless deoptimization/recompilation cycle
438e03
  - JDK-8257633: Missing -mmacosx-version-min=X flag when linking libjvm
438e03
  - JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java reports leaks
438e03
  - JDK-8257707: Fix incorrect format string in Http1HeaderParser
438e03
  - JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines
438e03
  - JDK-8257798: [PPC64] undefined reference to Klass::vtable_start_offset()
438e03
  - JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java as automatic test
438e03
  - JDK-8257910: [JVMCI] Set exception_seen accordingly in the runtime.
438e03
  - JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884
438e03
  - JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region
438e03
  - JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234
438e03
  - JDK-8258247: Couple of issues in fix for JDK-8249906
438e03
  - JDK-8258373: Update the text handling in the JPasswordField
438e03
  - JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk()
438e03
  - JDK-8258419: RSA cipher buffer cleanup
438e03
  - JDK-8258471: "search codecache" clhsdb command does not work
438e03
  - JDK-8258534: Epsilon: clean up unused includes
438e03
  - JDK-8258805: Japanese characters not entered by mouse click on Windows 10
438e03
  - JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
438e03
  - JDK-8258836: JNI local refs exceed capacity getDiagnosticCommandInfo
438e03
  - JDK-8258884: [TEST_BUG] Convert applet-based test open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java to a regular java test
438e03
  - JDK-8259007: This test printed a blank page
438e03
  - JDK-8259049: Uninitialized variable after JDK-8257513
438e03
  - JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA to false
438e03
  - JDK-8259580: Shenandoah: uninitialized label in VerifyThreadGCState
438e03
  - JDK-8259231: Epsilon: improve performance under contention during virtual space expansion
438e03
  - JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region"
438e03
  - JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days
438e03
  - JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
438e03
  - JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input
438e03
  - JDK-8259428: AlgorithmId.getEncodedParams() should return copy
438e03
  - JDK-8259446: runtime/jni/checked/TestCheckedReleaseArrayElements.java fails with stderr not empty
438e03
  - JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags
438e03
  - JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect
438e03
  - JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543
438e03
  - JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value
438e03
  - JDK-8259707: LDAP channel binding does not work with StartTLS extension
438e03
  - JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
438e03
  - JDK-8259849: Shenandoah: Rename store-val to IU-barrier
438e03
  - JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
438e03
  - JDK-8260029: aarch64: fix typo in verify_oop_array
438e03
  - JDK-8260308: Update LogCompilation junit to 4.13.1
438e03
  - JDK-8260338: Some fields in HaltNode is not cloned
438e03
  - JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS
438e03
  - JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
438e03
  - JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports false positive
438e03
  - JDK-8260497: Shenandoah: Improve SATB flushing
438e03
  - JDK-8260502: [s390] NativeMovRegMem::verify() fails because it's too strict
438e03
  - JDK-8260632: Build failures after JDK-8253353
438e03
  - JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end
438e03
  - JDK-8261022: Fix incorrect result of Math.abs() with char type
438e03
  - JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x
438e03
  - JDK-8261183: Follow on to Make lists of normal filenames
438e03
  - JDK-8261209: isStandalone property: remove dependency on pretty-print
438e03
  - JDK-8261231: Windows IME was disabled after DnD operation
438e03
  - JDK-8261251: Shenandoah: Use object size for full GC humongous compaction
438e03
  - JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined
438e03
  - JDK-8261334: NMT: tuning statistic shows incorrect hash distribution
438e03
  - JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
438e03
  - JDK-8261522: [PPC64] AES intrinsics write beyond the destination array
438e03
  - JDK-8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
438e03
  - JDK-8261585: Restore HandleArea used in Deoptimization::uncommon_trap
438e03
  - JDK-8261753: Test java/lang/System/OsVersionTest.java still failing on BigSur patch versions after JDK-8253702
438e03
  - JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java in 11u
438e03
  - JDK-8261912: Code IfNode::fold_compares_helper more defensively
438e03
  - JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales
438e03
  - JDK-8262018: Wrong format in SAP copyright header of OsVersionTest
438e03
  - JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator
438e03
438e03
Notes on individual issues:
438e03
===========================
438e03
438e03
core-libs/javax.naming:
438e03
438e03
JDK-8258824: LDAP Channel Binding Support for Java GSS/Kerberos
438e03
===============================================================
438e03
A new JNDI environment property "com.sun.jndi.ldap.tls.cbtype" has
438e03
been added to enable TLS Channel Binding data in LDAP authentication
438e03
over SSL/TLS protocol to the Windows AD server.  The only valid value
438e03
at present is "tls-server-end-point", where channel binding data is
438e03
created on the base of the TLS server certificate. See RFC-5929 [0]
438e03
and the module description of the `java.naming` module for further
438e03
details.
438e03
438e03
[0] RFC-5929 "Channel Bindings for TLS": https://www.ietf.org/rfc/rfc5929.txt
438e03
438e03
security-libs/java.security:
438e03
438e03
JDK-8260597: Added 2 HARICA Root CA Certificates
438e03
================================================
438e03
The following root certificates have been added to the cacerts truststore:
438e03
438e03
Alias Name: haricarootca2015
438e03
Distinguished Name: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
438e03
438e03
Alias Name: haricaeccrootca2015
438e03
Distinguished Name: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
438e03
438e03
security-libs/javax.net.ssl:
438e03
438e03
JDK-8256490: Disable TLS 1.0 and 1.1
438e03
====================================
438e03
TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer
438e03
considered secure and have been superseded by more secure and modern
438e03
versions (TLS 1.2 and 1.3).
438e03
438e03
These versions have now been disabled by default. If you encounter
438e03
issues, you can, at your own risk, re-enable the versions by removing
438e03
"TLSv1" and/or "TLSv1.1" from the `jdk.tls.disabledAlgorithms`
438e03
security property in the `java.security` configuration file.
438e03
438e03
tools:
438e03
438e03
JDK-8214213: jdeps --print-module-deps Reports Transitive Dependencies
438e03
======================================================================
438e03
`jdeps --print-module-deps`, `--list-deps`, and `--list-reduce-deps`
438e03
options have been enhanced as follows.
438e03
438e03
1. By default, they perform transitive module dependence analysis on
438e03
libraries on the class path and module path, both directly and
438e03
indirectly, as required by the given input JAR files or
438e03
classes. Previously, they only reported the modules required by the
438e03
given input JAR files or classes.  The `--no-recursive` option can be
438e03
used to request non-transitive dependence analysis.
438e03
438e03
2. By default, they flag any missing dependency, i.e. not found from
438e03
class path and module path, as an error.  The `--ignore-missing-deps`
438e03
option can be used to suppress missing dependence errors. Note that a
438e03
custom image is created with the list of modules output by jdeps when
438e03
using the `--ignore-missing-deps` option for a non-modular
438e03
application. Such an application, running on the custom image, might
438e03
fail at runtime when missing dependence errors are suppressed.
438e03
438e03
xml/jaxp:
438e03
438e03
JDK-8249867 XML declaration is not followed by a newline
438e03
========================================================
438e03
438e03
The DOM Load and Save `LSSerializer` does not have an explicit control
438e03
for whether or not the XML Declaration ends with a newline. In this
438e03
release, a JDK implementation specific property
438e03
`http://www.oracle.com/xml/jaxp/properties/isStandalone` and
438e03
corresponding System property `jdk.xml.isStandalone` are added to
438e03
control the addition of a newline and act independently without
438e03
having to set the pretty-print property. This property can be used to
438e03
reverse the incompatible change introduced in Java SE 7 Update 4 with
438e03
an update of Xalan 2.7.1 where a newline is omitted when pretty-print
438e03
is required.
438e03
438e03
For details, please refer to the bug report and the java.xml module-summary.
438e03
438e03
Usage:
438e03
438e03
// to set the property, get an instance of LSSerializer and set it along with pretty-print
438e03
LSSerializer ser = impl.createLSSerializer();
438e03
ser.getDomConfig().setParameter("format-pretty-print", true);
438e03
ser.getDomConfig().setParameter("http://www.oracle.com/xml/jaxp/properties/isStandalone", true);
438e03
438e03
// to use the System property, set it before initializing a LSSerializer
438e03
System.setProperty("jdk.xml.isStandalone", “true”);
438e03
438e03
// to clear the property, place the line anywhere after the LSSerializer is initialized
438e03
System.clearProperty("jdk.xml.isStandalone");
438e03
20ef41
New in release OpenJDK 11.0.10 (2021-01-19):
20ef41
=============================================
20ef41
Live versions of these release notes can be found at:
20ef41
  * https://bitly.com/openjdk11010
20ef41
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt
20ef41
20ef41
* Security fixes
20ef41
  - JDK-8247619: Improve Direct Buffering of Characters
20ef41
* Other changes
20ef41
  - JDK-6722928: Support SSPI as a native GSS-API provider
20ef41
  - JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
20ef41
  - JDK-8152332: [macosx] JFileChooser cannot be serialized on Mac OS X
20ef41
  - JDK-8161684: [testconf] Add VerifyOops' testing into compiler tiers
20ef41
  - JDK-8171279: Support X25519 and X448 in TLS
20ef41
  - JDK-8173361: various crashes in JvmtiExport::post_compiled_method_load
20ef41
  - JDK-8173658: JvmtiExport::post_class_unload() is broken for non-JavaThread initiators
20ef41
  - JDK-8191006: hsdis disassembler plugin does not compile with binutils 2.29+
20ef41
  - JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
20ef41
  - JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode
20ef41
  - JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
20ef41
  - JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
20ef41
  - JDK-8208483: Add 5 JNDI tests to com/sun/jndi/dns/FactoryTests/
20ef41
  - JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
20ef41
  - JDK-8208665: Amend cross-compilation docs with qemu-debootstrap recipe
20ef41
  - JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
20ef41
  - JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
20ef41
  - JDK-8211450: UndetVar::dup is not copying the kind field to the duplicated instance
20ef41
  - JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL) failed: resolving NULL _value"
20ef41
  - JDK-8212226: SurfaceManager throws "Invalid Image variant" for MultiResolutionImage (Windows)
20ef41
  - JDK-8213400: Support choosing group name in keytool keypair generation
20ef41
  - JDK-8213535: Windows HiDPI html lightweight tooltips are truncated
20ef41
  - JDK-8213698: Improve devkit creation and add support for linux/ppc64/ppc64le/s390x
20ef41
  - JDK-8214025: assert(t->singleton()) failed: must be a constant when ScavengeRootsInCode < 2
20ef41
  - JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java fails because of missing UnlockDiagnosticVMOptions
20ef41
  - JDK-8214787: Zero builds fail with "undefined JavaThread::thread_state()"
20ef41
  - JDK-8215583: Exclude runtime/handshake/HandshakeWalkSuspendExitTest.java
20ef41
  - JDK-8216012: Infinite loop in RSA KeyPairGenerator
20ef41
  - JDK-8216324: GetClassMethods is confused by the presence of default methods in super interfaces
20ef41
  - JDK-8217429: WebSocket over authenticating proxy fails to send Upgrade headers
20ef41
  - JDK-8217976: test/jdk/java/net/httpclient/websocket/WebSocketProxyTest.java fails intermittently
20ef41
  - JDK-8218021: Have jarsigner preserve posix permission attributes
20ef41
  - JDK-8218287: jshell tool: input behavior unstable after 12-ea+24 on Windows
20ef41
  - JDK-8218851: JVM crash in custom classloader stress test, JDK 12 & 13
20ef41
  - JDK-8220420: Cleanup c1_LinearScan
20ef41
  - JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad events to wrong jvmtiEnv
20ef41
  - JDK-8222286: Fix for JDK-8213419 is broken on s390
20ef41
  - JDK-8222527: HttpClient doesn't send HOST header when tunelling HTTP/1.1 through http proxy
20ef41
  - JDK-8222533: jtreg test jdk/internal/platform/cgroup/TestCgroupMetrics.java fails on SLES12.3 linux ppc64le machine
20ef41
  - JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails with exitValue = 137
20ef41
  - JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/tc02t001/TestDescription.java failed
20ef41
  - JDK-8224650: Add tests to support X25519 and X448 in TLS
20ef41
  - JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs
20ef41
  - JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash during initialization on Windows platforms
20ef41
  - JDK-8225687: Newly added sspi.cpp in JDK-6722928 still contains some small errors
20ef41
  - JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100
20ef41
  - JDK-8227275: Within native OOM error handling, assertions may hang the process
20ef41
  - JDK-8227647: [Graal] Test8009761.java fails due to "RuntimeException: static java.lang.Object compiler.uncommontrap.Test8009761.m3(boolean,boolean) not compiled"
20ef41
  - JDK-8229495: SIGILL in C2 generated OSR compilation
20ef41
  - JDK-8230910: libsspi_bridge does not build on Windows 32bit
20ef41
  - JDK-8232114: JVM crashed at imjpapi.dll in native code
20ef41
  - JDK-8234147: Avoid looking up standard charsets in core libraries
20ef41
  - JDK-8234393: [macos] printing ignores printer tray
20ef41
  - JDK-8234863: Increase default value of MaxInlineLevel
20ef41
  - JDK-8235218: Minimal VM is broken after JDK-8173361
20ef41
  - JDK-8235456: Minimal VM is broken after JDK-8212160
20ef41
  - JDK-8235829: graal crashes with Zombie.java test
20ef41
  - JDK-8236124: Minimal VM slowdebug build failed after JDK-8212160
20ef41
  - JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
20ef41
  - JDK-8236944: The legVecZ operand should be limited to zmm0-zmm15 registers
20ef41
  - JDK-8237186: Fix typo in copyright header of java/io/Reader/TransferTo.java
20ef41
  - JDK-8237499: JFR: Include stack trace in the ThreadStart event
20ef41
  - JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
20ef41
  - JDK-8237524: AArch64: String.compareTo() may return incorrect result
20ef41
  - JDK-8237950: C2 compilation fails with "Live Node limit exceeded limit" during ConvI2L::Ideal optimization
20ef41
  - JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read
20ef41
  - JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test
20ef41
  - JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails -XX:+VerifyOops with "verify_oop: rsi: broken oop"
20ef41
  - JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&)
20ef41
  - JDK-8239886: Minimal VM build fails after JDK-8237499
20ef41
  - JDK-8240633: Memory leaks in the implementations of FileChooserUI
20ef41
  - JDK-8240690: Race condition between EDT and BasicDirectoryModel.FilesLoader.run0()
20ef41
  - JDK-8241234: Unify monitor enter/exit runtime entries.
20ef41
  - JDK-8241311: Move some charset mapping tests from closed to open
20ef41
  - JDK-8241797: Add some tests to the problem list
20ef41
  - JDK-8242029: AArch64: skip G1 array copy pre-barrier if marking not active
20ef41
  - JDK-8242335: Additional Tests for RSASSA-PSS
20ef41
  - JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker
20ef41
  - JDK-8242614: cleanup duplicated test ldap server in some com/sun/jndi/ldap/ tests
20ef41
  - JDK-8242846: Bring back test/jdk/tools/jlink/plugins/OrderResourcesPluginTest.java
20ef41
  - JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
20ef41
  - JDK-8243290: Improve diagnostic messages for class verification and redefinition failures
20ef41
  - JDK-8243488: Add tests for set/get SendBufferSize and getReceiveBufferSize in DatagramSocket
20ef41
  - JDK-8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA
20ef41
  - JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test uses wrong class
20ef41
  - JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java test misses -version
20ef41
  - JDK-8244142: some hotspot/runtime tests don't check exit code of forked JVM
20ef41
  - JDK-8244278: Excessive code cache flushes and sweeps
20ef41
  - JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/Test8237524.java fails with --illegal-access=deny
20ef41
  - JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building with Xcode 11
20ef41
  - JDK-8244819: hsdis does not compile with binutils 2.34+
20ef41
  - JDK-8245051: c1 is broken if it is compiled by gcc without -fno-lifetime-dse
20ef41
  - JDK-8245168: jlink should not be treated as a "small" tool
20ef41
  - JDK-8245400: Upgrade to LittleCMS 2.11
20ef41
  - JDK-8246381: VM crashes with "Current BasicObjectLock* below than low_mark"
20ef41
  - JDK-8246434: Threads::print_on_error assumes that the heap has been set up
20ef41
  - JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480
20ef41
  - JDK-8247201: Print potential pointer value of readable stack memory in hs_err file
20ef41
  - JDK-8247763: assert(outer->outcnt() == 2) failed: 'only phis' failure in LoopNode::verify_strip_mined()
20ef41
  - JDK-8247867: Upgrade to freetype 2.10.2
20ef41
  - JDK-8248190: Enable Power10 system and implement new byte-reverse instructions
20ef41
  - JDK-8248226: TestCloneAccessStressGCM fails with -XX:-ReduceBulkZeroing
20ef41
  - JDK-8248347: windows build broken by JDK-8243114
20ef41
  - JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
20ef41
  - JDK-8248552: C2 crashes with SIGFPE due to division by zero
20ef41
  - JDK-8248596: [TESTBUG] compiler/loopopts/PartialPeelingUnswitch.java times out with Graal enabled
20ef41
  - JDK-8248745: Add jarsigner and keytool tests for restricted algorithms
20ef41
  - JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
20ef41
  - JDK-8248845: AArch64: stack corruption after spilling vector register
20ef41
  - JDK-8249176: Update GlobalSignR6CA test certificates
20ef41
  - JDK-8249183: JVM crash in "AwtFrame::WmSize" method
20ef41
  - JDK-8249192: MonitorInfo stores raw oops across safepoints
20ef41
  - JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions allowed
20ef41
  - JDK-8249603: C1: assert(has_error == false) failed: register allocation invalid
20ef41
  - JDK-8249605: C2: assert(no_dead_loop) failed: dead loop detected
20ef41
  - JDK-8249607: C2: assert(!had_error) failed: bad dominance
20ef41
  - JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint
20ef41
  - JDK-8249672: Include microcode revision in features_string on x86
20ef41
  - JDK-8249748: gtest silently ignores bad jvm arguments
20ef41
  - JDK-8249821: Separate libharfbuzz from libfontmanager
20ef41
  - JDK-8250598: Hyper-V is detected in spite of running on host OS
20ef41
  - JDK-8250605: Linux x86_32 builds fail after JDK-8249821
20ef41
  - JDK-8250636: iso8601_time returns incorrect offset part on MacOS
20ef41
  - JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY
20ef41
  - JDK-8250772: Test com/sun/jndi/ldap/NamingExceptionMessageTest.java fails intermittently with javax.naming.ServiceUnavailableException
20ef41
  - JDK-8250825: C2 crashes with assert(field != __null) failed: missing field
20ef41
  - JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz
20ef41
  - JDK-8250928: JFR: Improve hash algorithm for stack traces
20ef41
  - JDK-8250968: Symlinks attributes not preserved when using jarsigner on zip files
20ef41
  - JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
20ef41
  - JDK-8251118: BiasedLocking::preserve_marks should not have a HandleMark
20ef41
  - JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java failed due to timeout
20ef41
  - JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes target VM
20ef41
  - JDK-8251365: Build failure on AIX after 8250636
20ef41
  - JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
20ef41
  - JDK-8251456: [TESTBUG] compiler/vectorization/TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
20ef41
  - JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
20ef41
  - JDK-8251535: Partial peeling at unsigned test adds incorrect loop exit check
20ef41
  - JDK-8251949: ZGC: Set explicit heap size for compiler/gcbarriers tests
20ef41
  - JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9)
20ef41
  - JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
20ef41
  - JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
20ef41
  - JDK-8252497: Incorrect numeric currency code for ROL
20ef41
  - JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
20ef41
  - JDK-8252679: Two windows specific FileDIalog tests may fail on some Windows_Server_2016_Standard
20ef41
  - JDK-8252696: Loop unswitching may cause out of bound array load to be executed
20ef41
  - JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
20ef41
  - JDK-8253219: Epsilon: clean up unnecessary includes
20ef41
  - JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
20ef41
  - JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
20ef41
  - JDK-8253269: The CheckCommonColors test should provide more info on failure
20ef41
  - JDK-8253284: Zero OrderAccess barrier mappings are incorrect
20ef41
  - JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
20ef41
  - JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
20ef41
  - JDK-8253791: Issue with useAppleColor check in CSystemColors.m
20ef41
  - JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
20ef41
  - JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
20ef41
  - JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
20ef41
  - JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp
20ef41
  - JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
20ef41
  - JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
20ef41
  - JDK-8254190: [s390] interpreter misses exception check after calling monitorenter
20ef41
  - JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
20ef41
  - JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
20ef41
  - JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
20ef41
  - JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
20ef41
  - JDK-8255065: Zero: accessor_entry misses the IRIW case
20ef41
  - JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
20ef41
  - JDK-8255269: Unsigned overflow in g1Policy.cpp
20ef41
  - JDK-8255365: Problem list failing client manual tests
20ef41
  - JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
20ef41
  - JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
20ef41
  - JDK-8255550: x86: Assembler::cmpq(Address dst, Register src) encoding is incorrect
20ef41
  - JDK-8255603: Memory/Performance regression after JDK-8210985
20ef41
  - JDK-8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback
20ef41
  - JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/StreamFlush.java
20ef41
  - JDK-8256427: Test com/sun/jndi/dns/ConfigTests/PortUnreachable.java does not work on AIX
20ef41
  - JDK-8256452: Integrate missing part of JDK-8232370 to 11u
20ef41
  - JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/libOverpassMethods.c fails to compile on gcc 4.4.x
20ef41
  - JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to -Wl,-z,defs
20ef41
  - JDK-8256618: Zero: Linux x86_32 build still fails
20ef41
  - JDK-8256736: Zero: GTest tests fail with "unsuppported vm variant"
20ef41
  - JDK-8256809: Annotation processing causes NPE during flow analysis
20ef41
  - JDK-8257181: s390x builds are very noisy with gc-sections messages
20ef41
  - JDK-8257242: [macOS] Java app crashes while switching input methods
20ef41
  - JDK-8257545: SunJSSE FIPS regression in key exchange after JDK-8171279 11u backport
20ef41
  - JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false
20ef41
  - JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays
20ef41
  - JDK-8258630: Add expiry exception for QuoVadis root certificate
20ef41
20ef41
Notes on individual issues:
20ef41
===========================
20ef41
20ef41
security-libs/java.security:
20ef41
20ef41
JDK-8213821: -groupname Option Added to keytool Key Pair Generation
20ef41
===================================================================
20ef41
A new `-groupname` option has been added to `keytool -genkeypair` so
20ef41
that a user can specify a named group when generating a key pair. For
20ef41
example, `keytool -genkeypair -keyalg EC -groupname secp384r1` will
20ef41
generate an EC key pair by using the `secp384r1` curve. Because there
20ef41
might be multiple curves with the same size, using the `-groupname`
20ef41
option is preferred over the `-keysize` option.
20ef41
20ef41
JDK-8248263: jarsigner Preserves POSIX File Permission and symlink Attributes
20ef41
=============================================================================
20ef41
When signing a file that contains POSIX file permission or symlink
20ef41
attributes, `jarsigner` now preserves these attributes in the newly
20ef41
signed file but warns that these attributes are unsigned and not
20ef41
protected by the signature. The same warning is printed during the
20ef41
`jarsigner -verify` operation for such files.
20ef41
20ef41
Note that the `jar` tool does not read/write these attributes. This
20ef41
change is more visible to tools like `unzip` where these attributes
20ef41
are preserved.
20ef41
20ef41
security-libs/javax.net.ssl:
20ef41
20ef41
JDK-8225764:  Support for X25519 and X448 in TLS
20ef41
================================================
20ef41
20ef41
The named elliptic curve groups `x25519` and `x448` are now available
20ef41
for JSSE key agreement in TLS versions 1.0 to 1.3, with `x25519` being
20ef41
the most preferred of the default enabled named groups.  The default
20ef41
ordered list is now:
20ef41
20ef41
* x25519
20ef41
* secp256r1
20ef41
* secp384r1
20ef41
* secp521r1
20ef41
* x448
20ef41
* secp256k1
20ef41
* ffdhe2048
20ef41
* ffdhe3072
20ef41
* ffdhe4096
20ef41
* ffdhe6144
20ef41
* ffdhe8192
20ef41
20ef41
The default list can be overridden using the system property *`jdk.tls.namedGroups`*.
20ef41
20ef41
security-libs/org.ietf.jgss:
20ef41
20ef41
JDK-8214079: Added a Default Native GSS-API Library on Windows
20ef41
==============================================================
20ef41
A native GSS-API library has been added to JDK on the Windows
20ef41
platform. The library is client-side only and uses the default
20ef41
credentials. It will be loaded when the `sun.security.jgss.native`
20ef41
system property is set to "true". A user can still load a third-party
20ef41
native GSS-API library by setting the system property
20ef41
`sun.security.jgss.lib` to its path.
20ef41
20ef41
New in release OpenJDK 11.0.9.1 (2020-10-20):
20ef41
=============================================
20ef41
Live versions of these release notes can be found at:
20ef41
  * https://bitly.com/openjdk11091
20ef41
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.1.txt
20ef41
20ef41
* Regression fixes
20ef41
  - JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
20ef41
8d5b3a
New in release OpenJDK 11.0.9 (2020-10-20):
8d5b3a
===========================================
8d5b3a
Live versions of these release notes can be found at:
8d5b3a
  * https://bitly.com/openjdk1109
8d5b3a
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt
8d5b3a
8d5b3a
* Security fixes
8d5b3a
  - JDK-8233624: Enhance JNI linkage
8d5b3a
  - JDK-8236196: Improve string pooling
8d5b3a
  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
8d5b3a
  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
8d5b3a
  - JDK-8237995, CVE-2020-14782: Enhance certificate processing
8d5b3a
  - JDK-8240124: Better VM Interning
8d5b3a
  - JDK-8241114, CVE-2020-14792: Better range handling
8d5b3a
  - JDK-8242680, CVE-2020-14796: Improved URI Support
8d5b3a
  - JDK-8242685, CVE-2020-14797: Better Path Validation
8d5b3a
  - JDK-8242695, CVE-2020-14798: Enhanced buffer support
8d5b3a
  - JDK-8243302: Advanced class supports
8d5b3a
  - JDK-8244136, CVE-2020-14803: Improved Buffer supports
8d5b3a
  - JDK-8244479: Further constrain certificates
8d5b3a
  - JDK-8244955: Additional Fix for JDK-8240124
8d5b3a
  - JDK-8245407: Enhance zoning of times
8d5b3a
  - JDK-8245412: Better class definitions
8d5b3a
  - JDK-8245417: Improve certificate chain handling
8d5b3a
  - JDK-8248574: Improve jpeg processing
8d5b3a
  - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
8d5b3a
  - JDK-8253019: Enhanced JPEG decoding
8d5b3a
* Other changes
8d5b3a
  - JDK-6532025: GIF reader throws misleading exception with truncated images
8d5b3a
  - JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/PDialogTest.java needs update by removing a infinite loop
8d5b3a
  - JDK-8022535: [TEST BUG] javax/swing/text/html/parser/Test8017492.java fails
8d5b3a
  - JDK-8062947: Fix exception message to correctly represent LDAP connection failure
8d5b3a
  - JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
8d5b3a
  - JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/CloseServerSocket.java fails intermittently with Address already in use
8d5b3a
  - JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect
8d5b3a
  - JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider
8d5b3a
  - JDK-8172404: Tools should warn if weak algorithms are used before restricting them
8d5b3a
  - JDK-8193367: Annotated type variable bounds crash javac
8d5b3a
  - JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset
8d5b3a
  - JDK-8203026: java.rmi.NoSuchObjectException: no such object in table
8d5b3a
  - JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called
8d5b3a
  - JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass
8d5b3a
  - JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout
8d5b3a
  - JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java
8d5b3a
  - JDK-8204963: javax.swing.border.TitledBorder has a memory leak
8d5b3a
  - JDK-8204994: SA might fail to attach to process with "Windbg Error: WaitForEvent failed"
8d5b3a
  - JDK-8205534: Remove SymbolTable dependency from serviceability agent
8d5b3a
  - JDK-8206309: Tier1 SA tests fail
8d5b3a
  - JDK-8208281: java/nio/channels/AsynchronousSocketChannel/Basic.java timed out
8d5b3a
  - JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1
8d5b3a
  - JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect
8d5b3a
  - JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent!
8d5b3a
  - JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful
8d5b3a
  - JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
8d5b3a
  - JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
8d5b3a
  - JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
8d5b3a
  - JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
8d5b3a
  - JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code
8d5b3a
  - JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
8d5b3a
  - JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
8d5b3a
  - JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
8d5b3a
  - JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
8d5b3a
  - JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout
8d5b3a
  - JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
8d5b3a
  - JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
8d5b3a
  - JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
8d5b3a
  - JDK-8211694: JShell: Redeclared variable should be reset
8d5b3a
  - JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent
8d5b3a
  - JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest
8d5b3a
  - JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55
8d5b3a
  - JDK-8212807: tools/jar/multiRelease/Basic.java times out
8d5b3a
  - JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
8d5b3a
  - JDK-8213214: Set -Djava.io.tmpdir= when running tests
8d5b3a
  - JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found
8d5b3a
  - JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
8d5b3a
  - JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
8d5b3a
  - JDK-8214074: Ghash optimization using AVX instructions
8d5b3a
  - JDK-8214491: Upgrade to JLine 3.9.0
8d5b3a
  - JDK-8214797: TestJmapCoreMetaspace.java timed out
8d5b3a
  - JDK-8215243: JShell tests failing intermitently with \"Problem cleaning up the following threads:\"
8d5b3a
  - JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
8d5b3a
  - JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
8d5b3a
  - JDK-8215438: jshell tool: Ctrl-D causes EOF
8d5b3a
  - JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows
8d5b3a
  - JDK-8216974: HttpConnection not returned to the pool after 204 response
8d5b3a
  - JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time
8d5b3a
  - JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
8d5b3a
  - JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
8d5b3a
  - JDK-8221658: aarch64: add necessary predicate for ubfx patterns
8d5b3a
  - JDK-8221759: Crash when completing \"java.io.File.path\"
8d5b3a
  - JDK-8221918: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails: Shared archive not found
8d5b3a
  - JDK-8222074: Enhance auto vectorization for x86
8d5b3a
  - JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp
8d5b3a
  - JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command
8d5b3a
  - JDK-8223688: JShell: crash on the instantiation of raw anonymous class
8d5b3a
  - JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error
8d5b3a
  - JDK-8223940: Private key not supported by chosen signature algorithm
8d5b3a
  - JDK-8224184: jshell got IOException at exiting with AIX
8d5b3a
  - JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc
8d5b3a
  - JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException
8d5b3a
  - JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions
8d5b3a
  - JDK-8226536: Catch OOM from deopt that fails rematerializing objects
8d5b3a
  - JDK-8226575: OperatingSystemMXBean should be made container aware
8d5b3a
  - JDK-8226697: Several tests which need the @key headful keyword are missing it.
8d5b3a
  - JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous
8d5b3a
  - JDK-8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
8d5b3a
  - JDK-8227269: Slow class loading when running with JDWP
8d5b3a
  - JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
8d5b3a
  - JDK-8228448: Jconsole can't connect to itself
8d5b3a
  - JDK-8228967: Trust/Key store and SSL context utilities for tests
8d5b3a
  - JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
8d5b3a
  - JDK-8229815: Upgrade Jline to 3.12.1
8d5b3a
  - JDK-8230000: some httpclients testng tests run zero test
8d5b3a
  - JDK-8230002: javax/xml/jaxp/unittest/transform/SecureProcessingTest.java runs zero test
8d5b3a
  - JDK-8230010: Remove jdk8037819/BasicTest1.java
8d5b3a
  - JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter
8d5b3a
  - JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
8d5b3a
  - JDK-8230767: FlightRecorderListener returns null recording
8d5b3a
  - JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
8d5b3a
  - JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
8d5b3a
  - JDK-8231586: enlarge encoding space for OopMapValue offsets
8d5b3a
  - JDK-8231953: Wrong assumption in assertion in oop::register_oop
8d5b3a
  - JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes
8d5b3a
  - JDK-8232083: Minimal VM is broken after JDK-8231586
8d5b3a
  - JDK-8232161: Align some one-way conversion in MS950 charset with Windows
8d5b3a
  - JDK-8232855: jshell missing word in /help help
8d5b3a
  - JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration
8d5b3a
  - JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
8d5b3a
  - JDK-8233386: Initialize NULL fields for unused decorations
8d5b3a
  - JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
8d5b3a
  - JDK-8233686: XML transformer uses excessive amount of memory
8d5b3a
  - JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions
8d5b3a
  - JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment
8d5b3a
  - JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
8d5b3a
  - JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
8d5b3a
  - JDK-8234058: runtime/CompressedOops/CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
8d5b3a
  - JDK-8234149: Several regression tests do not dispose Frame at end
8d5b3a
  - JDK-8234347: "Turkey" meta time zone does not generate composed localized names
8d5b3a
  - JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/bug6980209.java fails in linux nightly
8d5b3a
  - JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC
8d5b3a
  - JDK-8234541: C1 emits an empty message when it inlines successfully
8d5b3a
  - JDK-8234687: change javap reporting on unknown attributes
8d5b3a
  - JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
8d5b3a
  - JDK-8236548: Localized time zone name inconsistency between English and other locales
8d5b3a
  - JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
8d5b3a
  - JDK-8237182: Update copyright header for shenandoah and epsilon files
8d5b3a
  - JDK-8237888: security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
8d5b3a
  - JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
8d5b3a
  - JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
8d5b3a
  - JDK-8238284: [macos] Zero VM build fails due to an obvious typo
8d5b3a
  - JDK-8238380: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10
8d5b3a
  - JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c "multiple definition" link errors with GCC10
8d5b3a
  - JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10
8d5b3a
  - JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
8d5b3a
  - JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
8d5b3a
  - JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), "should be non-static concrete method");
8d5b3a
  - JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
8d5b3a
  - JDK-8240169: javadoc fails to link to non-modular api docs
8d5b3a
  - JDK-8240295: hs_err elapsed time in seconds is not accurate enough
8d5b3a
  - JDK-8240360: NativeLibraryEvent has wrong library name on Linux
8d5b3a
  - JDK-8240676: Meet not symmetric failure when running lucene on jdk8
8d5b3a
  - JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
8d5b3a
  - JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
8d5b3a
  - JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows
8d5b3a
  - JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException
8d5b3a
  - JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
8d5b3a
  - JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
8d5b3a
  - JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME
8d5b3a
  - JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
8d5b3a
  - JDK-8241750: x86_32 build failure after JDK-8227269
8d5b3a
  - JDK-8242184: CRL generation error with RSASSA-PSS
8d5b3a
  - JDK-8242283: Can't start JVM when java home path includes non-ASCII character
8d5b3a
  - JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
8d5b3a
  - JDK-8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
8d5b3a
  - JDK-8243138: Enhance BaseLdapServer to support starttls extended request
8d5b3a
  - JDK-8243320: Add SSL root certificates to Oracle Root CA program
8d5b3a
  - JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
8d5b3a
  - JDK-8243389: enhance os::pd_print_cpu_info on linux
8d5b3a
  - JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment
8d5b3a
  - JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
8d5b3a
  - JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions
8d5b3a
  - JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows)
8d5b3a
  - JDK-8244087: 2020-04-24 public suffix list update
8d5b3a
  - JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26
8d5b3a
  - JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base
8d5b3a
  - JDK-8244196: adjust output in os_linux
8d5b3a
  - JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in
8d5b3a
  - JDK-8244287: JFR: Methods samples have line number 0
8d5b3a
  - JDK-8244703: "platform encoding not initialized" exceptions with debugger, JNI
8d5b3a
  - JDK-8244719: CTW: C2 compilation fails with "assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it"
8d5b3a
  - JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb
8d5b3a
  - JDK-8244763: Update --release 8 symbol information after JSR 337 MR3
8d5b3a
  - JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor
8d5b3a
  - JDK-8245151: jarsigner should not raise duplicate warnings on verification
8d5b3a
  - JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
8d5b3a
  - JDK-8245714: "Bad graph detected in build_loop_late" when loads are pinned on loop limit check uncommon branch
8d5b3a
  - JDK-8245801: StressRecompilation triggers assert "redundunt OSR recompilation detected. memory leak in CodeCache!"
8d5b3a
  - JDK-8245832: JDK build make-static-libs should build all JDK libraries
8d5b3a
  - JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan
8d5b3a
  - JDK-8245981: Upgrade to jQuery 3.5.1
8d5b3a
  - JDK-8246027: Minimal fastdebug build broken after JDK-8245801
8d5b3a
  - JDK-8246094: [macos] Sound Recording and playback is not working
8d5b3a
  - JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode
8d5b3a
  - JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
8d5b3a
  - JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError
8d5b3a
  - JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
8d5b3a
  - JDK-8246330: Add TLS Tests for Legacy ECDSA curves
8d5b3a
  - JDK-8246453: TestClone crashes with "all collected exceptions must come from the same place"
8d5b3a
  - JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods
8d5b3a
  - JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node
8d5b3a
  - JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code
8d5b3a
  - JDK-8247615: Initialize the bytes left for the heap sampler
8d5b3a
  - JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand
8d5b3a
  - JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&'
8d5b3a
  - JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
8d5b3a
  - JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention
8d5b3a
  - JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
8d5b3a
  - JDK-8248348: Regression caused by the update to BCEL 6.0
8d5b3a
  - JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1
8d5b3a
  - JDK-8248495: [macos] zerovm is broken due to libffi headers location
8d5b3a
  - JDK-8248851: CMS: Missing memory fences between free chunk check and klass read
8d5b3a
  - JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows
8d5b3a
  - JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650
8d5b3a
  - JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.
8d5b3a
  - JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel
8d5b3a
  - JDK-8249255: Build fails if source code in cygwin home dir
8d5b3a
  - JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
8d5b3a
  - JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList
8d5b3a
  - JDK-8249560: Shenandoah: Fix racy GC request handling
8d5b3a
  - JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
8d5b3a
  - JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
8d5b3a
  - JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
8d5b3a
  - JDK-8250609: C2 crash in IfNode::fold_compares
8d5b3a
  - JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics
8d5b3a
  - JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
8d5b3a
  - JDK-8250787: Provider.put no longer registering aliases in FIPS env
8d5b3a
  - JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM
8d5b3a
  - JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk
8d5b3a
  - JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds
8d5b3a
  - JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
8d5b3a
  - JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure
8d5b3a
  - JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
8d5b3a
  - JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
8d5b3a
  - JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase
8d5b3a
  - JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
8d5b3a
  - JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility
8d5b3a
  - JDK-8252258: [11u] JDK-8242154 changes the default vendor
8d5b3a
  - JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011
8d5b3a
  - JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11
8d5b3a
  - JDK-8253283: [11u] Test build/translations/VerifyTranslations.java failing after JDK-8252258
8d5b3a
  - JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
8d5b3a
8d5b3a
Notes on individual issues:
8d5b3a
===========================
8d5b3a
8d5b3a
core-libs/java.nio.charsets:
8d5b3a
8d5b3a
JDK-8240196: Modified the MS950 charset Encoder's Conversion Table
8d5b3a
==================================================================
8d5b3a
In this release, some of the one-way byte-to-char mappings have been
8d5b3a
aligned with the preferred mappings provided by the Unicode Consortium
8d5b3a
(https://unicode.org/Public/MAPPINGS/VENDORS/MICSFT/WindowsBestFit/bestfit950.txt).
8d5b3a
8d5b3a
core-libs/java.util:i18n:
8d5b3a
8d5b3a
JDK-8238914: Localized Time Zone Name Inconsistency Between English and Other Locales
8d5b3a
=====================================================================================
8d5b3a
English time zone names provided by the CLDR locale provider are now
8d5b3a
correctly synthesized following the CLDR spec, rather than substituted
8d5b3a
from the COMPAT provider. For example, SHORT style names are no longer
8d5b3a
synthesized abbreviations of LONG style names, but instead produce GMT
8d5b3a
offset formats.
8d5b3a
8d5b3a
core-svc/java.lang.management:
8d5b3a
8d5b3a
JDK-8236876: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data
8d5b3a
============================================================================================
8d5b3a
When executing in a container, or other virtualized operating
8d5b3a
environment, the following `OperatingSystemMXBean` methods in this
8d5b3a
release return container specific information, if
8d5b3a
available. Otherwise, they return host specific data:
8d5b3a
8d5b3a
* getFreePhysicalMemorySize()
8d5b3a
* getTotalPhysicalMemorySize()
8d5b3a
* getFreeSwapSpaceSize()
8d5b3a
* getTotalSwapSpaceSize()
8d5b3a
* getSystemCpuLoad()
8d5b3a
8d5b3a
security-libs/java.security:
8d5b3a
8d5b3a
JDK-8250756: Added Entrust Root Certification Authority - G4 certificate
8d5b3a
========================================================================
8d5b3a
The Entrust root certificate has been added to the cacerts truststore:
8d5b3a
8d5b3a
Alias Name: entrustrootcag4
8d5b3a
Distinguished Name: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,  Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
8d5b3a
8d5b3a
JDK-8250860: Added 3 SSL Corporation Root CA Certificates
8d5b3a
=========================================================
8d5b3a
The following root certificates have been added to the cacerts truststore for the SSL Corporation:
8d5b3a
8d5b3a
Alias Name: sslrootrsaca
8d5b3a
Distinguished Name: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
8d5b3a
8d5b3a
Alias Name: sslrootevrsaca
8d5b3a
Distinguished Name: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
8d5b3a
8d5b3a
Alias Name: sslrooteccca
8d5b3a
Distinguished Name: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
8d5b3a
8d5b3a
JDK-8236730: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default
8d5b3a
===================================================================================
8d5b3a
Weak named curves are disabled by default by adding them to the
8d5b3a
following `disabledAlgorithms` security properties:
8d5b3a
8d5b3a
* jdk.tls.disabledAlgorithms
8d5b3a
* jdk.certpath.disabledAlgorithms
8d5b3a
* jdk.jar.disabledAlgorithms
8d5b3a
8d5b3a
Red Hat has always disabled many of the curves provided by upstream,
8d5b3a
so the only addition in this release is:
8d5b3a
8d5b3a
* secp256k1
8d5b3a
8d5b3a
The curves that remain enabled are:
8d5b3a
8d5b3a
* secp256r1
8d5b3a
* secp384r1
8d5b3a
* secp521r1
8d5b3a
* X25519
8d5b3a
* X448
8d5b3a
8d5b3a
When large numbers of weak named curves need to be disabled, adding
8d5b3a
individual named curves to each `disabledAlgorithms` property would be
8d5b3a
overwhelming. To relieve this, a new security property,
8d5b3a
`jdk.disabled.namedCurves`, is implemented that can list the named
8d5b3a
curves common to all of the `disabledAlgorithms` properties. To use
8d5b3a
the new property in the `disabledAlgorithms` properties, precede the
8d5b3a
full property name with the keyword `include`.  Users can still add
8d5b3a
individual named curves to `disabledAlgorithms` properties separate
8d5b3a
from this new property.  No other properties can be included in the
8d5b3a
`disabledAlgorithms` properties.
8d5b3a
8d5b3a
To restore the named curves, remove the `include
8d5b3a
jdk.disabled.namedCurves` either from specific or from all
8d5b3a
`disabledAlgorithms` security properties. To restore one or more
8d5b3a
curves, remove the specific named curve(s) from the
8d5b3a
`jdk.disabled.namedCurves` property.
8d5b3a
8d5b3a
JDK-8244286: Tools Warn If Weak Algorithms Are Used Before Restricting Them
8d5b3a
===========================================================================
8d5b3a
The `keytool` and `jarsigner` tools have been updated to warn users
8d5b3a
about weak cryptographic algorithms being used before they are
8d5b3a
disabled. In this release, the tools issue warnings for the SHA-1 hash
8d5b3a
algorithm and 1024-bit RSA/DSA keys.
8d5b3a
8d5b3a
security-libs/javax.net.ssl:
8d5b3a
8d5b3a
JDK-8242147: New System Properties to Configure the TLS Signature Schemes
8d5b3a
=========================================================================
8d5b3a
Two new system properties have been added to customize the TLS
8d5b3a
signature schemes in JDK. `jdk.tls.client.SignatureSchemes` has been
8d5b3a
added for the TLS client side, and `jdk.tls.server.SignatureSchemes`
8d5b3a
has been added for the server side.
8d5b3a
8d5b3a
Each system property contains a comma-separated list of supported
8d5b3a
signature scheme names specifying the signature schemes that could be
8d5b3a
used for the TLS connections.
8d5b3a
8d5b3a
The names are described in the "Signature Schemes" section of the
8d5b3a
*Java Security Standard Algorithm Names Specification*.
8d5b3a
8d5b3a
security-libs/javax.security:
8d5b3a
8d5b3a
JDK-8242059: Support for canonicalize in krb5.conf
8d5b3a
==================================================
8d5b3a
8d5b3a
The 'canonicalize' flag in the [krb5.conf file][0] is now supported by
8d5b3a
the JDK Kerberos implementation. When set to *true*, RFC 6806 [1] name
8d5b3a
canonicalization is requested by clients in TGT requests to KDC
8d5b3a
services (AS protocol). Otherwise, and by default, it is not
8d5b3a
requested.
8d5b3a
8d5b3a
The new default behavior is different from previous releases where
8d5b3a
name canonicalization was always requested by clients in TGT requests
8d5b3a
to KDC services (provided that support for RFC 6806[1] was not
8d5b3a
explicitly disabled with the *sun.security.krb5.disableReferrals*
8d5b3a
system or security properties).
8d5b3a
8d5b3a
[0]: https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html
8d5b3a
[1]: https://tools.ietf.org/html/rfc6806
8d5b3a
8d5b3a
JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b
8d5b3a
====================================================================
8d5b3a
Following JDK's update to tzdata2020b, the long-obsolete files
8d5b3a
pacificnew and systemv have been removed. As a result, the
8d5b3a
"US/Pacific-New" zone name declared in the pacificnew data file is no
8d5b3a
longer available for use.
8d5b3a
8d5b3a
Information regarding the update can be viewed at
8d5b3a
https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html
8d5b3a
6e367a
New in release OpenJDK 11.0.8 (2020-07-14):
6e367a
===========================================
6e367a
Live versions of these release notes can be found at:
6e367a
  * https://bitly.com/oj1108
6e367a
  * https://builds.shipilev.net/backports-monitor/release-notes-11.0.8.txt
6e367a
6e367a
* Security fixes
6e367a
  - JDK-8230613: Better ASCII conversions
6e367a
  - JDK-8231800: Better listing of arrays
6e367a
  - JDK-8232014: Expand DTD support
6e367a
  - JDK-8233234: Better Zip Naming
6e367a
  - JDK-8233239, CVE-2020-14562: Enhance TIFF support
6e367a
  - JDK-8233255: Better Swing Buttons
6e367a
  - JDK-8234032: Improve basic calendar services
6e367a
  - JDK-8234042: Better factory production of certificates
6e367a
  - JDK-8234418: Better parsing with CertificateFactory
6e367a
  - JDK-8234836: Improve serialization handling
6e367a
  - JDK-8236191: Enhance OID processing
6e367a
  - JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
6e367a
  - JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
6e367a
  - JDK-8237592, CVE-2020-14577: Enhance certificate verification
6e367a
  - JDK-8238002, CVE-2020-14581: Better matrix operations
6e367a
  - JDK-8238013: Enhance String writing
6e367a
  - JDK-8238804: Enhance key handling process
6e367a
  - JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
6e367a
  - JDK-8238843: Enhanced font handing
6e367a
  - JDK-8238920, CVE-2020-14583: Better Buffer support
6e367a
  - JDK-8238925: Enhance WAV file playback
6e367a
  - JDK-8240119, CVE-2020-14593: Less Affine Transformations
6e367a
  - JDK-8240482: Improved WAV file playback
6e367a
  - JDK-8241379: Update JCEKS support
6e367a
  - JDK-8241522: Manifest improved jar headers redux
6e367a
  - JDK-8242136, CVE-2020-14621: Better XML namespace handling
6e367a
* Other changes
6e367a
  - JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
6e367a
  - JDK-7124307: JSpinner and changing value by mouse
6e367a
  - JDK-8022574: remove HaltNode code after uncommon trap calls
6e367a
  - JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
6e367a
  - JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
6e367a
  - JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
6e367a
  - JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo
6e367a
  - JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly
6e367a
  - JDK-8080353: JShell: Better error message on attempting to add default method
6e367a
  - JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled
6e367a
  - JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
6e367a
  - JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout
6e367a
  - JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily
6e367a
  - JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping
6e367a
  - JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
6e367a
  - JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
6e367a
  - JDK-8183369: RFC unconformity of HttpURLConnection with proxy
6e367a
  - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
6e367a
  - JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently
6e367a
  - JDK-8191930: [Graal] emits unparseable XML into compile log
6e367a
  - JDK-8193879: Java debugger hangs on method invocation
6e367a
  - JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
6e367a
  - JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
6e367a
  - JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
6e367a
  - JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
6e367a
  - JDK-8198339: Test javax/swing/border/Test6981576.java is unstable
6e367a
  - JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
6e367a
  - JDK-8203264: JNI exception pending in PlainDatagramSocketImpl.c:740
6e367a
  - JDK-8203672: JNI exception pending in PlainSocketImpl.c
6e367a
  - JDK-8203673: JNI exception pending in DualStackPlainDatagramSocketImpl.c:398
6e367a
  - JDK-8204834: Fix confusing "allocate" naming in OopStorage
6e367a
  - JDK-8205399: Set node color on pinned HashMap.TreeNode deletion
6e367a
  - JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
6e367a
  - JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value
6e367a
  - JDK-8207334: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
6e367a
  - JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
6e367a
  - JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
6e367a
  - JDK-8209333: Socket reset issue for TLS 1.3 socket close
6e367a
  - JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
6e367a
  - JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/ArchivedModuleCompareTest.java fails with EnableJVMCI.
6e367a
  - JDK-8210147: adjust some WSAGetLastError usages in windows network coding
6e367a
  - JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
6e367a
  - JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
6e367a
  - JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to check if EnableJVMCI is set.
6e367a
  - JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
6e367a
  - JDK-8211301: [macos] support full window content options
6e367a
  - JDK-8211332: Space for stub routines (code_size2) is too small on new Skylake CPUs
6e367a
  - JDK-8211339: NPE during SSL handshake caused by HostnameChecker
6e367a
  - JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
6e367a
  - JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
6e367a
  - JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE when JVMCI is absent
6e367a
  - JDK-8212167: JShell : Stack trace of exception has wrong line number
6e367a
  - JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
6e367a
  - JDK-8212986: Make Visual Studio compiler check less strict
6e367a
  - JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure
6e367a
  - JDK-8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent
6e367a
  - JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
6e367a
  - JDK-8214418: half-closed SSLEngine status may cause application dead loop
6e367a
  - JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"
6e367a
  - JDK-8214444: Wrong strncat limits in dfa.cpp
6e367a
  - JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
6e367a
  - JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"
6e367a
  - JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
6e367a
  - JDK-8214862: assert(proj != __null) at compile.cpp:3251
6e367a
  - JDK-8215369: Jcstress pollute /var/tmp with temporary files.
6e367a
  - JDK-8215551: Missing case label in nmethod::reloc_string_for()
6e367a
  - JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
6e367a
  - JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
6e367a
  - JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
6e367a
  - JDK-8216154: C4819 warnings at HotSpot sources on Windows
6e367a
  - JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
6e367a
  - JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
6e367a
  - JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
6e367a
  - JDK-8217447: Develop flag TraceICs is broken
6e367a
  - JDK-8217606: LdapContext#reconnect always opens a new connection
6e367a
  - JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
6e367a
  - JDK-8219214: Infinite Loop in CodeSection::dump()
6e367a
  - JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
6e367a
  - JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
6e367a
  - JDK-8221121: applications/microbenchmarks are encountering crashes in tier5
6e367a
  - JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread
6e367a
  - JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
6e367a
  - JDK-8221741: ClassCastException can happen when fontconfig.properties is used
6e367a
  - JDK-8221823: Requested JDialog width is ignored
6e367a
  - JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
6e367a
  - JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
6e367a
  - JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metric
6e367a
  - JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/RemoveDropTargetCrashTest.java fails on MacOS
6e367a
  - JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
6e367a
  - JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
6e367a
  - JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
6e367a
  - JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
6e367a
  - JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
6e367a
  - JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
6e367a
  - JDK-8225126: Test SetBoundsPaintTest.html faild on Windows when desktop is scaled
6e367a
  - JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
6e367a
  - JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
6e367a
  - JDK-8225653: Provide more information when hitting SIGILL from HaltNode
6e367a
  - JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
6e367a
  - JDK-8225789: Empty method parameter type should generate ClassFormatError