Key:

JDK-X  - https://bugs.openjdk.java.net/browse/JDK-X

CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY

New in release OpenJDK 11.0.23 (2024-04-16):

============================================

Live versions of these release notes can be found at:

  * https://bit.ly/openjdk11023

* CVEs

  - CVE-2024-21012

  - CVE-2024-21011

  - CVE-2024-21085

  - CVE-2024-21068

  - CVE-2024-21094

* Security fixes

  - JDK-8315708: Enhance HTTP/2 client usage

  - JDK-8319851: Improve exception logging

  - JDK-8322114: Improve Pack 200 handling

  - JDK-8322122: Enhance generation of addresses

  - JDK-8317507, JDK-8325348: C2 compilation fails with "Exceeded _node_regs array"

* Other changes

  - JDK-6928542: Chinese characters in RTF are not decoded

  - JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/bug4517214.java fails on MacOS

  - JDK-7148092: [macosx] When Alt+down arrow key is pressed, the combobox popup does not appear.

  - JDK-8054022: HttpURLConnection timeouts with Expect: 100-Continue and no chunking

  - JDK-8054572: [macosx] JComboBox paints the border incorrectly

  - JDK-8058176: [mlvm] tests should not allow code cache exhaustion

  - JDK-8067651: LevelTransitionTest.java, fix trivial methods levels logic

  - JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005 intermittently times out

  - JDK-8156889: ListKeychainStore.sh fails in some virtualized environments

  - JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps timeouting

  - JDK-8166554: Avoid compilation blocking in OverloadCompileQueueTest.java

  - JDK-8169475: WheelModifier.java fails by timeout

  - JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh to Java Jtreg Test

  - JDK-8186610: move ModuleUtils to top-level testlibrary

  - JDK-8192864: defmeth tests can hide failures

  - JDK-8193543: Regression automated test '/open/test/jdk/java/awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java' fails

  - JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/isexceeded001/TestDescription.java still failing

  - JDK-8202282: [TESTBUG] appcds TestCommon.makeCommandLineForAppCDS() can be removed

  - JDK-8202790: DnD test DisposeFrameOnDragTest.java does not clean up

  - JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/ChoicePopupLocation.java fails

  - JDK-8207211: [TESTBUG] Remove excessive output from CDS/AppCDS tests

  - JDK-8207214: Broken links in JDK API serialized-form page

  - JDK-8207855: Make applications/jcstress invoke tests in batches

  - JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/TestDescription.java fails in jdk/hs nightly

  - JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java.findDeadlock.INDIFY_Test Deadlocked threads are not always detected

  - JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails in AUFS file system

  - JDK-8208699: remove unneeded imports from runtime tests

  - JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out often in hs-tier7 testing

  - JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option is not always required for appcds tests

  - JDK-8209549: remove VMPropsExt from TEST.ROOT

  - JDK-8209595: MonitorVmStartTerminate.java timed out

  - JDK-8209946: [TESTBUG] CDS tests should use "@run driver"

  - JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java looks for libjsig in wrong location

  - JDK-8211978: Move  testlibrary/jdk/testlibrary/SimpleSSLContext.java and testkeys to network testlibrary

  - JDK-8213622: Windows VS2013 build failure - "'snprintf': identifier not found"

  - JDK-8213926: WB_EnqueueInitializerForCompilation requests compilation for NULL

  - JDK-8213927: G1 ignores AlwaysPreTouch when UseTransparentHugePages is enabled

  - JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr modules

  - JDK-8214915: CtwRunner misses export for jdk.internal.access

  - JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws NullPointerException

  - JDK-8217475: Unexpected StackOverflowError in "process reaper" thread

  - JDK-8218754: JDK-8068225 regression in JDIBreakpointTest

  - JDK-8219475: javap man page needs to be updated

  - JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/JMXInterfaceBindingTest.java passes trivially when it shouldn't

  - JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper.TestCaseImpl can't be defined in different runtime package as its nest host

  - JDK-8225471: Test utility  jdk.test.lib.util.FileUtils.areAllMountPointsAccessible needs to tolerate duplicates

  - JDK-8226706: (se) Reduce the number of outer loop iterations on Windows in java/nio/channels/Selector/RacyDeregister.java

  - JDK-8226905: unproblem list applications/ctw/modules/* tests on windows

  - JDK-8226910: make it possible to use jtreg's -match via run-test framework

  - JDK-8227438: [TESTLIB] Determine if file exists by Files.exists in function FileUtils.deleteFileIfExistsWithRetry

  - JDK-8231585: java/lang/management/ThreadMXBean/MaxDepthForThreadInfoTest.java fails with java.lang.NullPointerException

  - JDK-8232839: JDI AfterThreadDeathTest.java failed due to "FAILED: Did not get expected IllegalThreadStateException on a StepRequest.enable()"

  - JDK-8233453: MLVM deoptimize stress test timed out

  - JDK-8234309: LFGarbageCollectedTest.java fails with parse Exception

  - JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/AccessibleChoiceTest.java fails

  - JDK-8237777: "Dumping core ..." is shown despite claiming that "# No core dump will be written."

  - JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java failing with LDAP response read timeout

  - JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel

  - JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/AccessibleChoiceTest.java fails

  - JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001 failed due to "(IsSameObject#3) unexpected monitor object: 0x000000562336DBA8"

  - JDK-8246222: Rename javac test T6395981.java to be more informative

  - JDK-8247818: GCC 10 warning stringop-overflow with symbol code

  - JDK-8249087: Always initialize _body[0..1] in Symbol constructor

  - JDK-8251349: Add TestCaseImpl to OverloadCompileQueueTest.java's build dependencies

  - JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/btree010.java fails with ClassNotFoundException: nsk.sysdict.share.BTree0LLRLRLRRLR

  - JDK-8253543: sanity/client/SwingSet/src/ButtonDemoScreenshotTest.java failed with "AssertionError: All pixels are not black"

  - JDK-8253739: java/awt/image/MultiResolutionImage/MultiResolutionImageObserverTest.java fails

  - JDK-8253820: Save test images and dumps with timestamps from client sanity suite

  - JDK-8255277: randomDelay in DrainDeadlockT and LoggingDeadlock do not randomly delay

  - JDK-8255546: Missing coverage for javax.smartcardio.CardPermission and ResponseAPDU

  - JDK-8255743: Relax SIGFPE match in in runtime/ErrorHandling/SecondaryErrorTest.java

  - JDK-8257505: nsk/share/test/StressOptions stressTime is scaled in getter but not when printed

  - JDK-8259801: Enable XML Signature secure validation mode by default

  - JDK-8264135: UnsafeGetStableArrayElement should account for different JIT implementation details

  - JDK-8265349: vmTestbase/../stress/compiler/deoptimize/Test.java fails with OOME due to CodeCache exhaustion.

  - JDK-8269025: jsig/Testjsig.java doesn't check exit code

  - JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large pages subtest

  - JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java doesn't check exit code

  - JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java doesn't check exit code

  - JDK-8271828: mark hotspot runtime/classFileParserBug tests which ignore external VM flags

  - JDK-8271829: mark hotspot runtime/Throwable tests which ignore external VM flags

  - JDK-8271890: mark hotspot runtime/Dictionary tests which ignore external VM flags

  - JDK-8272291: mark hotspot runtime/logging tests which ignore external VM flags

  - JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't check exit codes

  - JDK-8272551: mark hotspot runtime/modules tests which ignore external VM flags

  - JDK-8272552: mark hotspot runtime/cds tests which ignore external VM flags

  - JDK-8273803: Zero: Handle "zero" variant in CommandLineOptionTest.java

  - JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java fails in Windows 11

  - JDK-8274621: NullPointerException because listenAddress[0] is null

  - JDK-8276796: gc/TestSystemGC.java large pages subtest fails with ZGC

  - JDK-8280007: Enable Neoverse N1 optimizations for Arm Neoverse V1 & N2

  - JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails with java.lang.RuntimeException: values differ by more than 1GB

  - JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from problemlist.

  - JDK-8281717: Cover logout method for several LoginModule

  - JDK-8282665: [REDO] ByteBufferTest.java: replace endless recursion with RuntimeException in void ck(double x, double y)

  - JDK-8284090: com/sun/security/auth/module/AllPlatforms.java fails to compile

  - JDK-8285756: clean up use of bad arguments for `@clean` in langtools tests

  - JDK-8285785: CheckCleanerBound test fails with PasswordCallback object is not released

  - JDK-8285867: Convert applet manual tests SelectionVisible.java to Frame and automate

  - JDK-8286846: test/jdk/javax/swing/plaf/aqua/CustomComboBoxFocusTest.java fails on mac aarch64

  - JDK-8286969: Add a new test library API to execute kinit in SecurityTools.java

  - JDK-8287113: JFR: Periodic task thread uses period for method sampling events

  - JDK-8289511: Improve test coverage for XPath Axes: child

  - JDK-8289764: gc/lock tests failed with "OutOfMemoryError: Java heap space: failed reallocation of scalar replaced objects"

  - JDK-8289948: Improve test coverage for XPath functions: Node Set Functions

  - JDK-8290399: [macos] Aqua LAF does not fire an action event if combo box menu is displayed

  - JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests failed with "isUsageThresholdExceeded() returned false, and is still false, while threshold = MMMMMMM and used peak = NNNNNNN"

  - JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup required permissions for jtreg version 7 jar

  - JDK-8292946: GC lock/jni/jnilock001 test failed "assert(gch->gc_cause() == GCCause::_scavenge_alot || !gch->incremental_collection_failed()) failed: Twice in a row"

  - JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed with "RuntimeException: Retrieved backing PlatformLogger level null is not the expected CONFIG"

  - JDK-8294158: HTML formatting for PassFailJFrame instructions

  - JDK-8294254: [macOS] javax/swing/plaf/aqua/CustomComboBoxFocusTest.java failure

  - JDK-8294402: Add diagnostic logging to VMProps.checkDockerSupport

  - JDK-8294535: Add screen capture functionality to PassFailJFrame

  - JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails intermittently on a VM

  - JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/AbstractDrbg/SpecTest.java intermittently timeout

  - JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java failed: ExceptionInInitializerError: target class not found

  - JDK-8300269: The selected item in an editable JComboBox with titled border is not visible in Aqua LAF

  - JDK-8300727: java/awt/List/ListGarbageCollectionTest/AwtListGarbageCollectionTest.java failed with "List wasn't garbage collected"

  - JDK-8301310: The SendRawSysexMessage test may cause a JVM crash

  - JDK-8301377: adjust timeout for JLI GetObjectSizeIntrinsicsTest.java subtest again

  - JDK-8301846: Invalid TargetDataLine after screen lock when using JFileChooser or COM library

  - JDK-8302017: Allocate BadPaddingException only if it will be thrown

  - JDK-8302109: Trivial fixes to btree tests

  - JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java

  - JDK-8302607: increase timeout for ContinuousCallSiteTargetChange.java

  - JDK-8304074: [JMX] Add an approximation of total bytes allocated on the Java heap by the JVM

  - JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373

  - JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1

  - JDK-8305502: adjust timeouts in three more M&M tests

  - JDK-8305505: NPE in javazic compiler

  - JDK-8305972: Update XML Security for Java to 3.0.2

  - JDK-8306072: Open source several AWT MouseInfo related tests

  - JDK-8306076: Open source AWT misc tests

  - JDK-8306409: Open source AWT KeyBoardFocusManger, LightWeightComponent related tests

  - JDK-8306640: Open source several AWT TextArea related tests

  - JDK-8306652: Open source AWT MenuItem related tests

  - JDK-8306681: Open source more AWT DnD related tests

  - JDK-8306683: Open source several clipboard and color AWT tests

  - JDK-8306752: Open source several container and component AWT tests

  - JDK-8306753: Open source several container AWT tests

  - JDK-8306755: Open source few Swing JComponent and AbstractButton tests

  - JDK-8306812: Open source several AWT Miscellaneous tests

  - JDK-8306871: Open source more AWT Drag & Drop tests

  - JDK-8306996: Open source Swing MenuItem related tests

  - JDK-8307123: Fix deprecation warnings in DPrinter

  - JDK-8307130: Open source few Swing JMenu tests

  - JDK-8307299: Move more DnD tests to open

  - JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing JTableHeader tests

  - JDK-8307381: Open Source JFrame, JIF related Swing Tests

  - JDK-8307683: Loop Predication should not hoist range checks with trap on success projection by negating their condition

  - JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC while allocating

  - JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler.compile does not close files

  - JDK-8308223: failure handler missed jcmd.vm.info command

  - JDK-8308232: nsk/jdb tests don't pass -verbose flag to the debuggee

  - JDK-8308245: Add -proc:full to describe current default annotation processing policy

  - JDK-8308336: Test java/net/HttpURLConnection/HttpURLConnectionExpectContinueTest.java failed: java.net.BindException: Address already in use

  - JDK-8309104: [JVMCI] compiler/unsafe/UnsafeGetStableArrayElement test asserts wrong values with Graal

  - JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton predicates for all If nodes in loop predication

  - JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/agentthr001/TestDescription.java crashing due to empty while loop

  - JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when using second test directory

  - JDK-8309870: Using -proc:full should be considered requesting explicit annotation processing

  - JDK-8310106: sun.security.ssl.SSLHandshake.getHandshakeProducer() incorrectly checks handshakeConsumers

  - JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/bug6889007.java fails

  - JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/interrupt001.java timed out due to missing prompt

  - JDK-8310807: java/nio/channels/DatagramChannel/Connect.java timed out

  - JDK-8311081: KeytoolReaderP12Test.java fail on localized Windows platform

  - JDK-8311511: Improve description of NativeLibrary JFR event

  - JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java

  - JDK-8313081: MonitoringSupport_lock should be unconditionally initialized after 8304074

  - JDK-8313082: Enable CreateCoredumpOnCrash for testing in makefiles

  - JDK-8313164: src/java.desktop/windows/native/libawt/windows/awt_Robot.cpp GetRGBPixels adjust releasing of resources

  - JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground release resources in early returns

  - JDK-8313643: Update HarfBuzz to 8.2.2

  - JDK-8313816: Accessing jmethodID might lead to spurious crashes

  - JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to extra concurrent mark with -Xcomp

  - JDK-8314164: java/net/HttpURLConnection/HttpURLConnectionExpectContinueTest.java fails intermittently in timeout

  - JDK-8314883: Java_java_util_prefs_FileSystemPreferences_lockFile0 write result errno in missing case

  - JDK-8315034: File.mkdirs() occasionally fails to create folders on Windows shared folder

  - JDK-8315042: NPE in PKCS7.parseOldSignedData

  - JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some cases

  - JDK-8315499: build using devkit on Linux ppc64le RHEL puts path to devkit into libsplashscreen

  - JDK-8315594: Open source few headless Swing misc tests

  - JDK-8315600: Open source few more headless Swing misc tests

  - JDK-8315602: Open source swing security manager test

  - JDK-8315606: Open source few swing text/html tests

  - JDK-8315611: Open source swing text/html and tree test

  - JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should run with -Xbatch

  - JDK-8315731: Open source several Swing Text related tests

  - JDK-8315761: Open source few swing JList and JMenuBar tests

  - JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/bug4654927.java: component must be showing on the screen to determine its location

  - JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use createTestJvm

  - JDK-8316028: Update FreeType to 2.13.2

  - JDK-8316030: Update Libpng to 1.6.40

  - JDK-8316106: Open source few swing JInternalFrame and JMenuBar tests

  - JDK-8316461: Fix: make test outputs TEST SUCCESS after unsuccessful exit

  - JDK-8316947: Write a test to check textArea triggers MouseEntered/MouseExited events properly

  - JDK-8317307: test/jdk/com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails with ConnectException: Connection timed out: no further information

  - JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js

  - JDK-8318154: Improve stability of WheelModifier.java test

  - JDK-8318340: Improve RSA key implementations

  - JDK-8318410: jdk/java/lang/instrument/BootClassPath/BootClassPathTest.sh fails on Japanese Windows

  - JDK-8318468: compiler/tiered/LevelTransitionTest.java fails with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1

  - JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java

  - JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni tests

  - JDK-8318608: Enable parallelism in vmTestbase/nsk/stress/threads tests

  - JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with "transport error 202: bind failed: Address already in use"

  - JDK-8318889: C2: add bailout after assert Bad graph detected in build_loop_late

  - JDK-8318951: Additional negative value check in JPEG decoding

  - JDK-8318955: Add ReleaseIntArrayElements in Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to early return

  - JDK-8318971: Better Error Handling for Jar Tool When Processing Non-existent Files

  - JDK-8318983: Fix comment typo in PKCS12Passwd.java

  - JDK-8319124: Update XML Security for Java to 3.0.3

  - JDK-8319456: jdk/jfr/event/gc/collection/TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker Initiated GC' not in the valid causes

  - JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh

  - JDK-8320001: javac crashes while adding type annotations to the return type of a constructor

  - JDK-8320208: Update Public Suffix List to b5bf572

  - JDK-8320363: ppc64 TypeEntries::type_unknown logic looks wrong, missed optimization opportunity

  - JDK-8320597: RSA signature verification fails on signed data that does not encode params correctly

  - JDK-8320798: Console read line with zero out should zero out underlying buffer

  - JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23

  - JDK-8320937: support latest VS2022 MSC_VER in abstract_vm_version.cpp

  - JDK-8321151: JDK-8294427 breaks Windows L&F on all older Windows versions

  - JDK-8321215: Incorrect x86 instruction encoding for VSIB addressing mode

  - JDK-8321408: Add Certainly roots R1 and E1

  - JDK-8321480: ISO 4217 Amendment 176 Update

  - JDK-8322178: Error. can't find jdk.testlibrary.SimpleSSLContext in test directory or libraries

  - JDK-8322417: Console read line with zero out should zero out when throwing exception

  - JDK-8322725: (tz) Update Timezone Data to 2023d

  - JDK-8322750: Test "api/java_awt/interactive/SystemTrayTests.html" failed because A blue ball icon is added outside of the system tray

  - JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is failing assert

  - JDK-8322772: Clean up code after JDK-8322417

  - JDK-8323008: filter out harmful -std* flags added by autoconf from CXX

  - JDK-8323243: JNI invocation of an abstract instance method corrupts the stack

  - JDK-8323515: Create test alias "all" for all test roots

  - JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/platform/docker/TestDockerMemoryMetrics.java always fail because OOM killed

  - JDK-8324184: Windows VS2010 build failed with "error C2275: 'int64_t'"

  - JDK-8324307: [11u] hotspot fails to build with GCC 12 and newer (non-static data member initializers)

  - JDK-8324347: Enable "maybe-uninitialized" warning for FreeType 2.13.1

  - JDK-8324659: GHA: Generic jtreg errors are not reported

  - JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/AKISerialNumber.java is failing

  - JDK-8325150: (tz) Update Timezone Data to 2024a

  - JDK-8326109: GCC 13 reports maybe-uninitialized warnings for jni.cpp with dtrace enabled

  - JDK-8326503: [11u] java/net/HttpURLConnection/HttpURLConnectionExpectContinueTest.java fail because of package org.junit.jupiter.api does not exist

  - JDK-8327391: Add SipHash attribution file

  - JDK-8329837: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23

Notes on individual issues:

===========================

security-libs/javax.xml.crypto:

JDK-8259801: Enable XML Signature Secure Validation Mode by Default

===================================================================

The XML Signature secure validation mode is now enabled by default.

The `jdk.xml.dsig.secureValidationPolicy` security property can be

used to control secure validation mode restrictions and constraints.

XML Signature secure validation mode can be set to `Boolean.FALSE`

via the `org.jcp.xml.dsig.secureValidation` property using the

`DOMValidateContext.setProperty()` API, if the previous behavior is

desirable and its associated security risks are taken into account.

JDK-8319124: Update XML Security for Java to 3.0.3

==================================================

The XML signature implementation in OpenJDK 11 has been updated to

Apache Santuario 3.0.3.  This update introduces four new SHA-3 based

RSA-MGF1 SignatureMethod algorithms.

However, the API of javax.xml.crypto.dsig.SignatureMethod can not be

changed in update releases to provide constants for these new

algorithms. The equivalent string literals should be used as below:

* SHA3_224_RSA_MGF1: "http://www.w3.org/2007/05/xmldsig-more#sha3-224-rsa-MGF1"

* SHA3_256_RSA_MGF1: "http://www.w3.org/2007/05/xmldsig-more#sha3-256-rsa-MGF1"

* SHA3_384_RSA_MGF1: "http://www.w3.org/2007/05/xmldsig-more#sha3-384-rsa-MGF1"

* SHA3_512_RSA_MGF1: "http://www.w3.org/2007/05/xmldsig-more#sha3-512-rsa-MGF1"

JDK-8305972: Update XML Security for Java to 3.0.2

==================================================

Support has been added for ED25519 and ED448 signature algorithms.

Avoid using the here() function henceforth.  Users can disable the

here() function by setting `jdk.xml.dsig.hereFunctionSupported` to

"false".

client-libs/java.awt

JDK-8322750: AWT SystemTray API Is Not Supported on Most Linux Desktops

=======================================================================

The java.awt.SystemTray API is used to interact with the system's

desktop taskbar to provide notifications and may include an icon

representing an application. The GNOME desktop's support for taskbar

icons has not worked properly for several years, due to a platform

bug. This bug, in turn, affects the JDK's SystemTray support on GNOME

desktops.

Therefore, in accordance with the SystemTray API specification,

java.awt.SystemTray.isSupported() will now return false on systems

that exhibit this bug, which is assumed to be those running a version

of GNOME Shell below 45.

The impact of this change is likely to be minimal, as users of the

SystemTray API should already be able to handle isSupported()

returning false and the system tray on such platforms has already been

unsupported for a number of years for all applications.

security-libs/java.security:

JDK-8321408: Added Certainly R1 and E1 Root Certificates

========================================================

The following root certificates have been added to the cacerts

truststore:

Name: Certainly

Alias Name: certainlyrootr1

Distinguished Name: CN=Certainly Root R1, O=Certainly, C=US

Name: Certainly

Alias Name: certainlyroote1

Distinguished Name: CN=Certainly Root E1, O=Certainly, C=US

New in release OpenJDK 11.0.22 (2024-01-16):

============================================

Live versions of these release notes can be found at:

  * https://bit.ly/openjdk11022

* CVEs

  - CVE-2024-20918

  - CVE-2024-20919

  - CVE-2024-20921

  - CVE-2024-20926

  - CVE-2024-20945

  - CVE-2024-20952

* Security fixes

  - JDK-8308204: Enhanced certificate processing

  - JDK-8314284: Enhance Nashorn performance

  - JDK-8314295: Enhance verification of verifier

  - JDK-8314307: Improve loop handling

  - JDK-8314468: Improve Compiler loops

  - JDK-8316976: Improve signature handling

  - JDK-8317547: Enhance TLS connection support

* Other changes

  - JDK-6381945: (cal) Japanese calendar unit test system should avoid multiple static imports

  - JDK-6445283: ProgressMonitorInputStream not large file aware (>2GB)

  - JDK-8026393: jarsigner never shows a warning in badKeyUsage case

  - JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java fails with java.lang.RuntimeException: Test failed, scroll on drag doesn't work

  - JDK-8053479: (dc) DatagramChannel.read() throws exception instead of discarding data when buffer too small

  - JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574 fails and perf regression

  - JDK-8153090: TAB key cannot change input focus after the radio button in the Color Selection dialog

  - JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/ActualFocusedWindowBlockingTest.java fails intermittentently on windows

  - JDK-8183374: Refactor java/lang/Runtime shell tests to java

  - JDK-8185531: [TESTBUG] Improve test configuration for shared strings

  - JDK-8195589: T6587786.java failed after JDK-8189997

  - JDK-8197825: [Test] Intermittent timeout with javax/swing JColorChooser Test

  - JDK-8205467: javax/management/remote/mandatory/connection/MultiThreadDeadLockTest.java possible deadlock

  - JDK-8207166: jdk/jshell/JdiHangingLaunchExecutionControlTest.java - launch timeout

  - JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1.code__00201m1 hangs with -noverify

  - JDK-8210265: Crash in HSpaceCounters::update_used()

  - JDK-8211045: [Testbug] Fix for 8144279 didn't define a test case!

  - JDK-8212997: [TESTBUG] Remove defmeth tests for class file versions 50 and 51

  - JDK-8213898: CDS dumping of springboot asserts in G1ArchiveAllocator::alloc_new_region

  - JDK-8214694: cleanup rawtypes warnings in open jndi tests

  - JDK-8217329: JTREG: Clean up, remove unused imports in gc folder

  - JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/b6969574/INDIFY_Test.java fails with -Xcomp

  - JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in JDK networking tests

  - JDK-8221396: Clean up serviceability/sa/TestUniverse.java

  - JDK-8223145: Replace wildcard address with loopback or local host in tests - part 1

  - JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog may capture focus using TAB Key.

  - JDK-8224035: Replace wildcard address with loopback or local host in tests - part 9

  - JDK-8224204: Replace wildcard address with loopback or local host in tests - part 10

  - JDK-8226825: Replace wildcard address with loopback or local host in tests - part 19

  - JDK-8230435: Replace wildcard address with loopback or local host in tests - part 22

  - JDK-8230858: Replace wildcard address with loopback or local host in tests - part 23

  - JDK-8231556: Wrong font ligatures used when 2 versions of same font used

  - JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java looks for wrong string with Shenandoah

  - JDK-8232135: Add diagnostic output to test java/util/ProcessBuilder/Basic.java

  - JDK-8232513: java/net/DatagramSocket/PortUnreachable.java still fails intermittently with BindException

  - JDK-8232933: Javac inferred type does not conform to equality constraint

  - JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/deoptimize test as stress test

  - JDK-8233847: (sctp) Flx link-local IPv6 scope handling and test cleanup.

  - JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR incorrectly

  - JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java should not specify a TLS protocol

  - JDK-8240235: jdk.test.lib.util.JarUtils updates jar files incorrectly

  - JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/CustomLauncherTest.java test to make binaries from source file

  - JDK-8240754: Instrument FlowTest.java to provide more debug traces.

  - JDK-8242330: Arrays should be cloned in several JAAS Callback classes

  - JDK-8244508: JFR: FlightRecorderOptions reset date format

  - JDK-8249812: java/net/DatagramSocket/PortUnreachable.java still fails intermittently with SocketTimeoutException

  - JDK-8251177: [macosx] The text "big" is truncated in JTabbedPane

  - JDK-8252713: jtreg time out of CtrlASCII.java seems to hang the Xserver.

  - JDK-8254711: Add java.security.Provider.getService JFR Event

  - JDK-8255548: Missing coverage for javax.xml.crypto.dom.DOMCryptoContext

  - JDK-8258914: javax/net/ssl/DTLS/RespondToRetransmit.java timed out

  - JDK-8259266: com/sun/jdi/JdbOptions.java failed with "RuntimeException: 'prop[boo] = >foo 2<' missing from stdout/stderr"

  - JDK-8260035: Deproblemlist few problemlisted test

  - JDK-8260431: com/sun/jdi/JdbOptions.java failed with "RuntimeException: 'prop[boo] = >foo<' missing from stdout/stderr"

  - JDK-8263530: sun.awt.X11.ListHelper.removeAll() should use clear()

  - JDK-8265586: [windows] last button is not shown in AWT Frame with BorderLayout and MenuBar set.

  - JDK-8265678: Test java/awt/Focus/ActualFocusedWindowTest/ActualFocusedWindowBlockingTest.java fails intermittentently on windows

  - JDK-8266249: javax/swing/JPopupMenu/7156657/bug7156657.java fails on macOS

  - JDK-8267860: Off-by-one bug when searching arrays in AlpnGreaseTest

  - JDK-8268916: Tests for AffirmTrust roots

  - JDK-8271519: java/awt/event/SequencedEvent/MultipleContextsFunctionalTest.java failed with "Total [200] - Expected [400]"

  - JDK-8273804: Platform.isTieredSupported should handle the no-compiler case

  - JDK-8275329: ZGC: vmTestbase/gc/gctests/SoftReference/soft004/soft004.java fails with assert(_phases->length() <= 1000) failed: Too many recored phases?

  - JDK-8275333: Print count in "Too many recored phases?" assert

  - JDK-8278456: Define jtreg jdk_desktop test group time-based sub-tasks for use by headful testing.

  - JDK-8280004: DCmdArgument<jlong>::parse_value() should handle NULL input

  - JDK-8282143: Objects.requireNonNull should be ForceInline

  - JDK-8282404: DrawStringWithInfiniteXform.java failed with "RuntimeException: drawString with InfiniteXform transform takes long time"

  - JDK-8284331: Add sanity check for signal handler modification warning.

  - JDK-8285612: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java

  - JDK-8285687: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PageRangesDlgTest.java

  - JDK-8286707: JFR: Don't commit JFR internal jdk.JavaMonitorWait events

  - JDK-8288325: [windows] Actual and Preferred Size of AWT Non-resizable frame are different

  - JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java is unstable in MacOS machines

  - JDK-8288993: Make AwtFramePackTest generic by removing @requires tag

  - JDK-8289077: Add manual tests to open

  - JDK-8289238: Refactoring changes to PassFailJFrame Test Framework

  - JDK-8289547: Update javax/swing/Popup/TaskbarPositionTest.java

  - JDK-8289584: (fs) Print size values in java/nio/file/FileStore/Basic.java when they differ by > 1GiB

  - JDK-8289745: JfrStructCopyFailed uses heap words instead of bytes for object sizes

  - JDK-8289917: Metadata for regionsRefilled of G1EvacuationStatistics event is wrong

  - JDK-8290067: Show stack dimensions in UL logging when attaching threads

  - JDK-8290469: Add new positioning options to PassFailJFrame test framework

  - JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests resilience under spurious failures

  - JDK-8292683: Remove BadKeyUsageTest.java from Problem List

  - JDK-8292713: Unsafe.allocateInstance should be intrinsified without UseUnalignedAccesses

  - JDK-8293098: GHA: Harmonize GCC version handling for host and cross builds

  - JDK-8293107: GHA: Bump to Ubuntu 22.04

  - JDK-8293166: jdk/jfr/jvm/TestDumpOnCrash.java fails on Linux ppc64le and Linux aarch64

  - JDK-8293361: GHA: dump config.log in case of configure failure

  - JDK-8293466: libjsig should ignore non-modifying sigaction calls

  - JDK-8293811: Provide a reason for PassFailJFrame.forceFail

  - JDK-8294281: Allow warnings to be disabled on a per-file basis

  - JDK-8294427: Check boxes and radio buttons have rendering issues on Windows in High DPI env

  - JDK-8294673: JFR: Add SecurityProviderService#threshold to TestActiveSettingEvent.java

  - JDK-8294941: GHA: Cut down cross-compilation sysroots

  - JDK-8294956: GHA: qemu-debootstrap is deprecated, use the regular one

  - JDK-8295213: Run GHA manually with user-specified make and configure arguments

  - JDK-8295885: GHA: Bump gcc versions

  - JDK-8296275: Write a test to verify setAccelerator  method of JMenuItem

  - JDK-8297296: java/awt/Mouse/EnterExitEvents/DragWindowTest.java fails with "No MouseReleased event on label!"

  - JDK-8297640: Increase buffer size for buf (insert_features_names) in Abstract_VM_Version::insert_features_names

  - JDK-8298905: Test "java/awt/print/PrinterJob/ImagePrinting/PrintARGBImage.java" fails because the frames of instruction does not display

  - JDK-8299255: Unexpected round errors in FreetypeFontScaler

  - JDK-8299330: Minor improvements in MSYS2 Workflow handling

  - JDK-8300259: Add test coverage for processing of pending block files in signed JARs

  - JDK-8300272: Improve readability of the test JarWithOneNonDisabledDigestAlg

  - JDK-8300405: Screen capture for test JFileChooserSetLocationTest.java, failure case

  - JDK-8301065: Handle control characters in java_lang_String::print

  - JDK-8301167: Update VerifySignedJar to actually exercise and test verification

  - JDK-8301570: Test  runtime/jni/nativeStack/ needs to detach the native thread

  - JDK-8302017: Allocate BadPaddingException only if it will be thrown

  - JDK-8302525: Write a test to check various components send Events while mouse and key are used simultaneously

  - JDK-8303607: SunMSCAPI provider leaks memory and keys

  - JDK-8306134: Open source some AWT tests relating to Button and a few other classes

  - JDK-8306135: Clean up and open source some AWT tests

  - JDK-8306280: Open source several choice AWT tests

  - JDK-8306372: Open source AWT CardLayout and Checkbox tests

  - JDK-8306430: Open source some AWT tests related to TextComponent and Toolkit

  - JDK-8306575: Clean up and open source four Dialog related tests

  - JDK-8306765: Some client related jtreg problem list entries are malformed

  - JDK-8306883: Thread stacksize is reported with wrong units in os::create_thread logging

  - JDK-8307079: Update test java/awt/Choice/DragOffNoSelect.java

  - JDK-8307165: java/awt/dnd/NoFormatsDropTest/NoFormatsDropTest.java timed out

  - JDK-8308592: Framework for CA interoperability testing

  - JDK-8308910: Allow executeAndLog to accept running process

  - JDK-8309095: Remove UTF-8 character from TaskbarPositionTest.java

  - JDK-8310265: (process) jspawnhelper should not use argv[0]

  - JDK-8310549: avoid potential leaks in KeystoreImpl.m related to JNU_CHECK_EXCEPTION early returns

  - JDK-8311285: report some fontconfig related environment variables in hs_err file

  - JDK-8311813: C1: Uninitialized PhiResolver::_loop field

  - JDK-8312065: Socket.connect does not timeout when profiling

  - JDK-8312126: NullPointerException in CertStore.getCRLs after 8297955

  - JDK-8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

  - JDK-8312535: MidiSystem.getSoundbank() throws unexpected SecurityException

  - JDK-8312573: Failure during CompileOnly parsing leads to ShouldNotReachHere

  - JDK-8312972: Bump update version for OpenJDK: jdk-11.0.22

  - JDK-8313428: GHA: Bump GCC versions for July 2023 updates

  - JDK-8313576: GCC 7 reports compiler warning in bundled freetype 2.13.0

  - JDK-8313626: C2 crash due to unexpected exception control flow

  - JDK-8313657: com.sun.jndi.ldap.Connection.cleanup does not close connections on SocketTimeoutErrors

  - JDK-8313691: use close after failing os::fdopen in vmError and ciEnv

  - JDK-8313707: GHA: Bootstrap sysroots with --variant=minbase

  - JDK-8313792: Verify 4th party information in src/jdk.internal.le/share/legal/jline.md

  - JDK-8313815: The exception messages printed by jcmd ManagementAgent.start are corrupted on Japanese Windows

  - JDK-8314063: The socket is not closed in Connection::createSocket when the handshake failed for LDAP connection

  - JDK-8314094: java/lang/ProcessHandle/InfoTest.java fails on Windows when run as user with Administrator privileges

  - JDK-8314242: Update applications/scimark/Scimark.java to accept VM flags

  - JDK-8314262: GHA: Cut down cross-compilation sysroots deeper

  - JDK-8314263: Signed jars triggering Logger finder recursion and StackOverflowError

  - JDK-8314730: GHA: Drop libfreetype6-dev transitional package in favor of libfreetype-dev

  - JDK-8315020: The macro definition for LoongArch64 zero build is not accurate.

  - JDK-8315062: [GHA] get-bootjdk action should return the abolute path

  - JDK-8315135: Memory leak in the native implementation of Pack200.Unpacker.unpack()

  - JDK-8315214: Do not run sun/tools/jhsdb tests concurrently

  - JDK-8315480: [11u] Harmonize GHA cross-compilation block with mainline

  - JDK-8315683: Parallelize java/util/concurrent/tck/JSR166TestCase.java

  - JDK-8315692: Parallelize gc/stress/TestStressRSetCoarsening.java test

  - JDK-8315696: SignedLoggerFinderTest.java test failed

  - JDK-8315766: Parallelize gc/stress/TestStressIHOPMultiThread.java test

  - JDK-8315770: serviceability/sa/TestJmapCoreMetaspace.java should run with -XX:-VerifyDependencies

  - JDK-8315862: [11u] Backport 8227337: javax/management/remote/mandatory/connection/ReconnectTest.java NoSuchObjectException no such object in table

  - JDK-8315863: [GHA] Update checkout action to use v4

  - JDK-8315937: Enable parallelism in vmTestbase/nsk/stress/numeric tests

  - JDK-8316087: Test SignedLoggerFinderTest.java is still failing

  - JDK-8316178: Better diagnostic header for CodeBlobs

  - JDK-8316206: Test StretchedFontTest.java fails for Baekmuk font

  - JDK-8316380: [11u] Backport 8170089: nsk/jdi/EventSet/resume/resume008: ERROR: suspendCounts don't match for : Common-Cleaner

  - JDK-8316514: Better diagnostic header for VtableStub

  - JDK-8316710: Exclude java/awt/font/Rotate/RotatedTextTest.java

  - JDK-8316746: Top of lock-stack does not match the unlocked object

  - JDK-8316906: Clarify TLABWasteTargetPercent flag

  - JDK-8317373: Add Telia Root CA v2

  - JDK-8317374: Add Let's Encrypt ISRG Root X2

  - JDK-8317920: JDWP-agent sends broken exception event with onthrow option

  - JDK-8317967: Enhance test/jdk/javax/net/ssl/TLSCommon/SSLEngineTestCase.java to handle default cases

  - JDK-8318669: Target OS detection in 'test-prebuilt' makefile target is incorrect when running on MSYS2

  - JDK-8318705: [macos] ProblemList java/rmi/registry/multipleRegistries/MultipleRegistries.java

  - JDK-8318759: Add four DigiCert root certificates

  - JDK-8319187: Add three eMudhra emSign roots

  - JDK-8320597: RSA signature verification fails on signed data that does not encode params correctly

  - JDK-8323423: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22

Notes on individual issues:

===========================

security-libs/java.security:

JDK-8254711: New JFR Event: jdk.SecurityProviderService

=======================================================

A new Java Flight Recorder (JFR) event has been added to record

details of calls to the java.security.Provider.getService(String type,

String algorithm) method.

The event contains three fields:

* type - the type of service

* algorithm - the algorithm name

* provider - the security provider

This event is disabled by default. It may be enabled via the usual JFR

configuration files and options.

JDK-8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar

===============================================================================================================================

A maximum signature file size property, jdk.jar.maxSignatureFileSize,

was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with

a default of 8MB. This default proved to be too small for some JAR

files. This release, 11.0.22, increases it to 16MB.

JDK-8317373: Added Telia Root CA v2 Certificate

===============================================

The following root certificate has been added to the cacerts

truststore:

Name: Telia Root CA v2

Alias Name: teliarootcav2

Distinguished Name: CN=Telia Root CA v2, O=Telia Finland Oyj, C=FI ```

JDK-8317374: Added ISRG Root X2 CA Certificate from Let's Encrypt

=================================================================

The following root certificate has been added to the cacerts

truststore:

Name: Let's Encrypt

Alias Name: letsencryptisrgx2

Distinguished Name: CN=ISRG Root X2, O=Internet Security Research Group, C=US

JDK-8318759: Added Four Root Certificates from DigiCert, Inc.

=============================================================

The following root certificates have been added to the cacerts

truststore:

Name: DigiCert, Inc.

Alias Name: digicertcseccrootg5

Distinguished Name: CN=DigiCert CS ECC P384 Root G5, O="DigiCert, Inc.", C=US

Name: DigiCert, Inc.

Alias Name: digicertcsrsarootg5

Distinguished Name: CN=DigiCert CS RSA4096 Root G5, O="DigiCert, Inc.", C=US

Name: DigiCert, Inc.

Alias Name: digicerttlseccrootg5

Distinguished Name: CN=DigiCert TLS ECC P384 Root G5, O="DigiCert, Inc.", C=US

Name: DigiCert, Inc.

Alias Name: digicerttlsrsarootg5

Distinguished Name: CN=DigiCert TLS RSA4096 Root G5, O="DigiCert, Inc.", C=US

JDK-8319187: Added Three Root Certificates from eMudhra Technologies Limited

============================================================================

The following root certificates have been added to the cacerts

truststore:

Name: eMudhra Technologies Limited

Alias Name: emsignrootcag1

Distinguished Name: CN=emSign Root CA - G1, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN

Name: eMudhra Technologies Limited

Alias Name: emsigneccrootcag3

Distinguished Name: CN=emSign ECC Root CA - G3, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN

Name: eMudhra Technologies Limited

Alias Name: emsignrootcag2

Distinguished Name: CN=emSign Root CA - G2, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN

New in release OpenJDK 11.0.21 (2023-10-17):

============================================

Live versions of these release notes can be found at:

  * https://bit.ly/openjdk11021

* CVEs

  - CVE-2023-22081

* Security fixes

  - JDK-8286503, JDK-8312367: Enhance security classes

  - JDK-8296581: Better system proxy support

  - JDK-8297856: Improve handling of Bidi characters

  - JDK-8305815, JDK-8307278: Update Libpng to 1.6.39

  - JDK-8306881, JDK-8307286: Update FreeType to 2.13.0

  - JDK-8309966: Enhanced TLS connections

* Other changes

  - JDK-6176679: Application freezes when copying an animated gif image to the system clipboard

  - JDK-8023980: JCE doesn't provide any class to handle RSA private key in PKCS#1

  - JDK-8155246: Throw error if default java.security file is missing

  - JDK-8158880: test/java/time/tck/java/time/format/TCKDateTimeFormatterBuilder.java fail with zh_CN locale

  - JDK-8168261: Use server cipher suites preference by default

  - JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently with bind failed: Address already in use

  - JDK-8201516: DebugNonSafepoints generates incorrect information

  - JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"

  - JDK-8211343: nsk_jvmti_parseoptions should handle multiple suboptions

  - JDK-8212045: Add back the tests that were removed from HashesTest.java and AddExportsTest.java

  - JDK-8216059: nsk_jvmti_parseoptions still has dependency on tilde separator

  - JDK-8217237: HttpClient does not deal well with multi-valued WWW-Authenticate challenge headers

  - JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX}

  - JDK-8217612: (CL)HSDB cannot show some JVM flags

  - JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after JDK-8217612

  - JDK-8218471: generate-unsafe-access-tests.sh does not correctly invoke build.tools.spp.Spp

  - JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags fails with -othervm

  - JDK-8220410: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed with missing expected output

  - JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/thrstat001/TestDescription.java times out

  - JDK-8222323: ChildAlwaysOnTopTest.java fails with "RuntimeException: Failed to unset alwaysOnTop"

  - JDK-8223573: Replace wildcard address with loopback or local host in tests - part 4

  - JDK-8223714: HTTPSetAuthenticatorTest could be made more resilient

  - JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java sometimes detect threads+1 connections

  - JDK-8223856: Replace wildcard address with loopback or local host in tests - part 8

  - JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found filesystem twice

  - JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/LDAPCertStoreImpl.java

  - JDK-8224768: Test ActalisCA.java fails

  - JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java fails on Windows

  - JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs

  - JDK-8228341: SignTwice.java fails intermittently on Windows

  - JDK-8228403: SignTwice.java failed with java.io.FileNotFoundException: File name too long

  - JDK-8229147: Linux os::create_thread() overcounts guardpage size with newer glibc (>=2.27)

  - JDK-8229333: java/io/File/SetLastModified.java timed out

  - JDK-8229338: clean up test/jdk/java/util/RandomAccess/Basic.java

  - JDK-8229348: java/net/DatagramSocket/UnreferencedDatagramSockets.java fails intermittently

  - JDK-8229481: sun/net/www/protocol/https/ChunkedOutputStream.java failed with a SSLException

  - JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails without IPv6

  - JDK-8230132: java/net/NetworkInterface/NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling Pseudo-Interface

  - JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails intermittently due to reverse lookup failed

  - JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14

  - JDK-8231516: network QuickAckTest.java failed due to "SocketException: maximum number of DatagramSockets reached"

  - JDK-8232101: (sctp) Add minimal sanity tests for SCTP

  - JDK-8232195: Enable BigInteger tests: DivisionOverflow, SymmetricRangeTests and StringConstructorOverflow

  - JDK-8232840: java/math/BigInteger/largeMemory/SymmetricRangeTests.java fails due to "OutOfMemoryError: Requested array size exceeds VM limit"

  - JDK-8232922: Add java/math/BigInteger/largeMemory/SymmetricRangeTests.java to ProblemList-Xcomp

  - JDK-8234808: jdb quoted option parsing broken

  - JDK-8236045: [TESTBUG] MismatchedWhiteBox test fails with missing WhiteBox$WhiteBoxPermission.class

  - JDK-8237183: Bug ID missing for test in patch which fixed JDK-8230665

  - JDK-8238157: security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java test failures because of revocation date

  - JDK-8239007: java/math/BigInteger/largeMemory/ tests should be disabled on 32-bit platforms

  - JDK-8239264: Clearup the legacy ObjectIdentifier constructor from int array

  - JDK-8239333: Mark test AmazonCA.java with intermittent key

  - JDK-8239537: cgroup MetricsTester testMemorySubsystem fails sometimes when testing memory.kmem.tcp.usage_in_bytes

  - JDK-8240193: loadLibrary("osxsecurity") should not be removed

  - JDK-8241097: java/math/BigInteger/largeMemory/SymmetricRangeTests.java requires -XX:+CompactStrings

  - JDK-8242151: Improve OID mapping and reuse among JDK security providers for aliases registration

  - JDK-8242330: Arrays should be cloned in several JAAS Callback classes

  - JDK-8242897: KeyFactory.generatePublic( x509Spec ) failed with java.security.InvalidKeyException

  - JDK-8243210: ClhsdbScanOops fails with NullPointerException in FileMapHeader.inCopiedVtableSpace

  - JDK-8244078: ProcessTools executeTestJvm and createJavaProcessBuilder have inconsistent handling of test.*.opts

  - JDK-8247895: SHA1PRNGReseed.java is calling setSeed(0)

  - JDK-8247968: test/jdk/javax/crypto/SecretKeyFactory/security.properties has wrong header

  - JDK-8248001: javadoc generates invalid HTML pages whose ftp:// links are broken

  - JDK-8249699: java/io/ByteArrayOutputStream/MaxCapacity.java should use @requires instead of @ignore

  - JDK-8251517: [TESTBUG] com/sun/net/httpserver/bugs/B6393710.java does not scale socket timeout

  - JDK-8252530: Fix inconsistencies in hotspot whitebox

  - JDK-8254350: CompletableFuture.get may swallow InterruptedException

  - JDK-8255348: NPE in PKIXCertPathValidator event logging code

  - JDK-8257993: vmTestbase/nsk/jvmti/RedefineClasses/StressRedefine/TestDescription.java crash intermittently

  - JDK-8259796: timed CompletableFuture.get may swallow InterruptedException

  - JDK-8260274: Cipher.init(int, key) does not use highest priority provider for random bytes

  - JDK-8260878: com/sun/jdi/JdbOptions.java fails without jfr