Notes generated: Wed Jun 05 16:38:20 CEST 2024





Issue Description

Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values

Certain TLS ALPN values couldn't be properly read or written by the SunJSSE provider. This is due to the choice of Strings as the API interface and the undocumented internal use of the UTF-8 Character Set which converts characters larger than U+00007F (7-bit ASCII) into multi-byte arrays that may not be expected by a peer.

ALPN values are now represented using the network byte representation expected by the peer, which should require no modification for standard 7-bit ASCII-based character Strings. However, SunJSSE now encodes/decodes String characters as 8-bit ISO88591/LATIN-1 characters. This means applications that used characters above U+000007F that were previously encoded using UTF-8 may need to either be modified to perform the UTF-8 conversion, or set the Java security property jdk.tls.alpnCharset to "UTF-8" revert the behavior.

Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values

Certain TLS ALPN values couldn't be properly read or written by the SunJSSE provider. This is due to the choice of Strings as the API interface and the undocumented internal use of the UTF-8 character set which converts characters larger than U+00007F (7-bit ASCII) into multi-byte arrays that may not be expected by a peer.

SunJSSE now encodes/decodes String characters as 8-bit ISO88591/LATIN-1 characters. This means applications that used characters above U+000007F that were previously encoded using UTF-8 may need to either be modified to perform the UTF-8 conversion, or set the Java security property jdk.tls.alpnCharset to "UTF-8" revert the behavior.

See the updated guide at for more information.


SocketExceptions Are Not Wrapped Into SSLExceptions in SSLSocketImpl

This release reverts the behavior of SSLSocketImpl and SSLTransport introduced by JDK-8196584. SocketException will now be thrown as is instead of being suppressed into an SSLException.


Support for certificate_authorities Extension

The "certificate_authorities" extension is an optional extension introduced in TLS 1.3. It is used to indicate the certificate authorities (CAs) that an endpoint supports and should be used by the receiving endpoint to guide certificate selection.

With this JDK release, the "certificate_authorities" extension is supported for TLS 1.3 in both the client and the server sides. This extension is always present for client certificate selection, while it is optional for server certificate selection.

Applications can enable this extension for server certificate selection by setting the jdk.tls.client.enableCAExtension system property to true. The default value of the property is false.

Note that if the client trusts more CAs than the size limit of the extension (less than 2^16 bytes), the extension is not enabled. Also, some server implementations do not allow handshake messages to exceed 2^14 bytes. Consequently, there may be interoperability issues when jdk.tls.client.enableCAExtension is set to true and the client trusts more CAs than the server implementation limit.


Issue Description

Removed Telia Company's Sonera Class2 CA Certificate

The following root certificate has been removed from the cacerts truststore: ` + Telia Company + soneraclass2ca DN: CN=Sonera Class2 CA, O=Sonera, C=FI `


Customizing PKCS12 keystore Generation

New system and security properties have been added to enable users to customize the generation of PKCS #12 keystores. This includes algorithms and parameters for key protection, certificate protection, and MacData. The detailed explanation and possible values for these properties can be found in the "PKCS12 KeyStore properties" section of the file.

Also, support for the following SHA-2 based HmacPBE algorithms has been added to the SunJCE provider: HmacPBESHA224, HmacPBESHA256, HmacPBESHA384, HmacPBESHA512, HmacPBESHA512/224, HmacPBESHA512/256


Upgraded the Default PKCS12 Encryption and MAC Algorithms

The default encryption and MAC algorithms used in a PKCS #12 keystore have been updated. The new algorithms are based on AES-256 and SHA-256 and are stronger than the old algorithms that were based on RC2, DESede, and SHA-1. See the security properties starting with keystore.pkcs12 in the file for detailed information.

For compatibility, a new system property named keystore.pkcs12.legacy is defined that will revert the algorithms to use the older, weaker algorithms. There is no value defined for this property.


Removed Root Certificates with 1024-bit Keys

The following root certificates with weak 1024-bit RSA public keys have been removed from the cacerts keystore: ``` + alias name "thawtepremiumserverca [jdk]"   Distinguished Name:, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA

  • alias name "verisignclass2g2ca [jdk]"   Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US

  • alias name "verisignclass3ca [jdk]"   Distinguished Name: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US

  • alias name "verisignclass3g2ca [jdk]"   Distinguished Name: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US

  • alias name "verisigntsaca [jdk]"   Distinguished Name: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA




Priority Bug Summary
P3 JDK-8259869 [macOS] Remove desktop module dependencies on JNF Reference APIs
P3 JDK-8259651 [macOS] Replace JNF_COCOA_ENTER/EXIT macros
P3 JDK-8259343 [macOS] Update JNI error handling in Cocoa code.
P3 JDK-8260616 Removing remaining JNF dependencies in the java.desktop module
P4 JDK-8263846 Bad JNI lookup getFocusOwner in accessibility code on macOS
P4 JDK-8249142 java/awt/FontClass/CreateFont/ is unstable


Priority Bug Summary
P3 JDK-8242557 Add length limit for strings in PNGImageWriter
P3 JDK-8259232 Bad JNI lookup during printing
P3 JDK-8264047 Duplicate global variable 'jvm' in libjavajpeg and libawt
P3 JDK-6847157 java.lang.NullPointerException: HDC for component at sun.java2d.loops.Blit.Blit
P3 JDK-8262829 Native crash in Win32PrintServiceLookup.getAllPrinterNames()
P3 JDK-8261170 Upgrade to FreeType 2.10.4
P3 JDK-8260380 Upgrade to LittleCMS 2.12
P3 JDK-8263311 Watch registry changes for remote printers update instead of polling
P4 JDK-8260432 allocateSpaceForGP in freetypeScaler.c might leak memory
P4 JDK-8220074 Clean up GCC 8.3 errors in LittleCMS
P4 JDK-8241829 Cleanup the code for PrinterJob on windows
P4 JDK-8240487 Cleanup whitespace in .cc, .hh, .m, and .mm files
P4 JDK-8264923 PNGImageWriter.write_zTXt throws Exception with a typo
P4 JDK-8171303 sun/java2d/pipe/ fails on Windows & Linux


Priority Bug Summary
P3 JDK-8264786 [macOS] All Swing/AWT apps cause Allow Notifications prompt to appear when app is launched
P3 JDK-8259585 [macOS] Bad JNI lookup error : Accessible actions do not work on macOS
P3 JDK-8262446 DragAndDrop hangs on Windows
P3 JDK-8262461 handle wcstombsdmp return value correctly in unix awt_InputMethod.c
P4 JDK-8260426 awt debug_mem.c DMem_AllocateBlock might leak memory
P4 JDK-8241087 Build failure with VS 2019 (16.5.0) due to C2039 and C2873
P4 JDK-8257414 Drag n Drop target area is wrong on high DPI systems
P4 JDK-8257853 Remove dependencies on JNF's JNI utility functions in AWT and 2D code
P4 JDK-8225116 Test intermittently fails


Priority Bug Summary
P3 JDK-8261198 [macOS] Incorrect JNI parameters in number conversion in A11Y code
P3 JDK-8259729 Missed JNFInstanceOf -> IsInstanceOf conversion
P4 JDK-7106851 Test should not use System.exit


Priority Bug Summary
P4 JDK-8195841 PNGImageReader.readNullTerminatedString() doesnt check for non-null terminated strings with length equal to maxLen


Priority Bug Summary
P4 JDK-8238567 SoftMainMixer.processAudioBuffers(): Wrong handling of stoppedMixers


Priority Bug Summary
P3 JDK-8239312 [macOS] javax/swing/JFrame/NSTexturedJFrame/
P3 JDK-8190763 Class cast exception on (CompoundEdit) UndoableEditEvent.getEdit()
P3 JDK-8247753 UIManager.getSytemLookAndFeelClassName() returns wrong value on Fedora 32
P4 JDK-8266713 [AIX] Build failure after 11u backport of JDK-8247753
P4 JDK-8264328 Broken license in javax/swing/JComboBox/8072767/
P4 JDK-8196100 javax/swing/text/JTextComponent/5074573/ fails


Priority Bug Summary
P4 JDK-8261422 Adjust problematic String.format calls in jdk/internal/util/ outOfBoundsMessage


Priority Bug Summary
P3 JDK-8256244 java/lang/ProcessHandle/ fails with TestNG 7.1
P4 JDK-8263729 [test] divert spurious output away from stream under test in ProcessBuilder Basic test
P4 JDK-8265421 java/lang/String/ test is missing a memory requirement


Priority Bug Summary
P3 JDK-8233185 HttpServer.stop() blocks indefinitely when called on dispatch thread
P3 JDK-8260925 HttpsURLConnection does not work with other JSSE provider.
P4 JDK-8261601 (sctp) free memory in early return in Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
P4 JDK-8261791 (sctp) handleSendFailed in SctpChannelImpl.c potential leaks
P4 JDK-8244205 HTTP/2 tunnel connections through proxy may be reused regardless of which proxy is selected
P4 JDK-8244031 HttpClient should have more tests for HEAD requests
P4 JDK-8187450 JNI local refs exceeds capacity warning in NetworkInterface::getAll
P4 JDK-8207404 MulticastSocket tests failing on AIX
P4 JDK-8265099 Revert backport to 11u of 8236859: WebSocket over authenticating proxy fails with NPE
P4 JDK-8236859 WebSocket over authenticating proxy fails with NPE


Priority Bug Summary
P2 JDK-8267641 [11u] 8227609 backport typo
P3 JDK-8227080 (fs) Files.newInputStream(...).skip(n) is slow
P3 JDK-8227609 (fs) Files.newInputStream(...).skip(n) should allow skipping beyond file size
P3 JDK-8264821 DirectIOTest fails on a system with large block size


Priority Bug Summary
P3 JDK-8252883 AccessDeniedException caused by delayed file deletion on Windows


Priority Bug Summary
P3 JDK-8262110 DST starts from incorrect time in 2038
P3 JDK-8073446 TimeZone getOffset API does not return a DST offset between years 2038-2137
P3 JDK-8241082 Update IANA Language Subtag Registry to Version 2020-03-16
P3 JDK-8255086 Update the root locale display names
P4 JDK-8210443 Migrate Locale matching tests to JDK Repo.
P4 JDK-8242010 Update IANA Language Subtag Registry to Version 2020-04-01
P4 JDK-8247432 Update IANA Language Subtag Registry to Version 2020-09-29


Priority Bug Summary
P3 JDK-8258753 StartTlsResponse.close() hangs due to synchronization issues


Priority Bug Summary
P4 JDK-8214854 JDWP: Unforseen output truncation in logging


Priority Bug Summary
P4 JDK-8260707 java/lang/instrument/PremainClass/ times out


Priority Bug Summary
P4 JDK-8251031 Some vmTestbase/nsk/monitoring/RuntimeMXBean tests fail with hostnames starting from digits


Priority Bug Summary
P2 JDK-8207247 AArch64: Enable Minimal and Client VM builds
P2 JDK-8261812 C2 compilation fails with assert(!had_error) failed: bad dominance
P2 JDK-8260284 C2: assert(_base == Int) failed: Not an Int
P2 JDK-8259276 C2: Empty expression stack when reexecuting tableswitch/lookupswitch instructions after deoptimization
P2 JDK-8262295 C2: Out-of-Bounds Array Load from Clone Source
P2 JDK-8252779 compiler/graalunit/ failed after JDK-8251525
P2 JDK-8261914 IfNode::fold_compares_helper faces non-canonicalized bool when running JRuby JSON workload
P2 JDK-8263361 Incorrect arraycopy stub selected by C2 for SATB collectors
P2 JDK-8262093 java/util/concurrent/tck/ failed "assert(false) failed: unexpected node"
P2 JDK-8262739 String inflation C2 intrinsic prevents insertion of anti-dependencies
P2 JDK-8227222 vmTestbase/jit/FloatingPoint/gen_math/Loops04/ hits assert(((!attributes->uses_vl()) || (attributes->get_vector_len() == AVX_512bit) || (!_legacy_mode_vl) || (attributes->is_legacy_mode()))) failed: XMM register should be 0-15
P2 JDK-8231713 x86_32 build failures after JDK-8226721 (Missing intrinsics for Math.ceil, floor, rint)
P3 JDK-8265784 [C2] Hoisting of DecodeN leaves MachTemp inputs behind
P3 JDK-8217465 [REDO] - Optimize CodeHeap Analytics
P3 JDK-8262726 AArch64: C1 StubAssembler::call_RT can corrupt stack
P3 JDK-8248411 AArch64: Insufficient error handling when CodeBuffer is exhausted
P3 JDK-8263676 AArch64: one potential bug in C1 LIRGenerator::generate_address()
P3 JDK-8261649 AArch64: Optimize LSE atomics in C++ code
P3 JDK-8261027 AArch64: Support for LSE atomics C++ HotSpot code
P3 JDK-8263425 AArch64: two potential bugs in C1 LIRGenerator::generate_address()
P3 JDK-8214512 ARM32: Jtreg test compiler/c2/ fails on ARM
P3 JDK-8238812 assert(false) failed: bad AD file
P3 JDK-8226627 assert(t->singleton()) failed: must be a constant
P3 JDK-8261235 C1 compilation fails with assert(res->vreg_number() == index) failed: conversion check
P3 JDK-8264958 C2 compilation fails with assert "n is later than its clone"
P3 JDK-8260420 C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint
P3 JDK-8261730 C2 compilation fails with assert(store->find_edge(load) != -1) failed: missing precedence edge
P3 JDK-8257822 C2 crashes with SIGFPE due to a division that floats above its zero check
P3 JDK-8265938 C2's conditional move optimization does not handle top Phi
P3 JDK-8257574 C2: "failed: parsing found no loops but there are some" assert failure
P3 JDK-8217918 C2: -XX:+AggressiveUnboxing is broken
P3 JDK-8259061 C2: assert(found) failed: memory-writing node is not placed in its original loop or an ancestor of it
P3 JDK-8255763 C2: OSR miscompilation caused by invalid memory instruction placement
P3 JDK-8219586 CodeHeap State Analytics processes dead nmethods
P3 JDK-8264223 CodeHeap::verify fails extra_hops assertion in fastdebug test
P3 JDK-8248568 compiler/c2/ failed "RuntimeException: 'test' missing from stdout/stderr"
P3 JDK-8220407 compiler/intrinsics/math/ timedout
P3 JDK-8263448 CTW: fatal error: meet not symmetric
P3 JDK-8262298 G1BarrierSetC2::step_over_gc_barrier fails with assert "bad barrier shape"
P3 JDK-8262837 handle split_USE correctly
P3 JDK-8259777 Incorrect predication condition generated by ADLC
P3 JDK-8259710 Inlining trace leaks memory
P3 JDK-8264360 Loop strip mining verification fails with "should be on the backedge"
P3 JDK-8216314 SIGILL in CodeHeapState::print_names()
P3 JDK-8260653 Unreachable nodes keep speculative types alive
P3 JDK-8262465 Very long compilation times and high memory consumption in C2 debug builds
P3 JDK-8265154 vinserti128 operand mix up for KNL platforms
P4 JDK-8264173 [s390] Improve Hardware Feature Detection And Reporting
P4 JDK-8263260 [s390] Support latest hardware (z14 and z15)
P4 JDK-8232591 AArch64: Add missing match rules for smaddl, smsubl and smnegl
P4 JDK-8241475 AArch64: Add missing support for PopCountVI node
P4 JDK-8243597 AArch64: Add support for integer vector abs
P4 JDK-8243240 AArch64: Add support for MulVB
P4 JDK-8243155 AArch64: Add support for SqrtVF
P4 JDK-8214922 AArch64: Add vectorization support for fmin/fmax
P4 JDK-8252259 AArch64: Adjust default value of FLOATPRESSURE
P4 JDK-8223020 aarch64: expand minI_rReg and maxI_rReg patterns into separate instructions
P4 JDK-8251525 AArch64: Faster Math.signum(fp)
P4 JDK-8248870 AArch64: I2L/L2I conversions can be skipped for masked positive values
P4 JDK-8255625 AArch64: Implement Base64.encodeBlock accelerator/intrinsic
P4 JDK-8233948 AArch64: Incorrect mapping between OptoReg and VMReg for high 64 bits of Vector Register
P4 JDK-8249189 AArch64: more L2I conversions can be skipped
P4 JDK-8222412 AARCH64: multiple instructions encoding issues
P4 JDK-8252311 AArch64: save two words in itable lookup stub
P4 JDK-8216259 AArch64: Vectorize Adler32 intrinsics
P4 JDK-8214128 ARM32: wrong stack alignment on Deoptimization::unpack_frames
P4 JDK-8242429 Better implementation for signed extract
P4 JDK-8264626 C1 should be able to inline excluded methods
P4 JDK-8260255 C1: LoopInvariantCodeMotion constructor can leave some fields uninitialized
P4 JDK-8253923 C2 doesn't always run loop opts for compilations that include loops
P4 JDK-8264151 ciMethod::ensure_method_data() should return false is loading resulted in empty state
P4 JDK-8230428 Cleanup dead CastIP node code in formssel.cpp
P4 JDK-8247408 IdealGraph bit check expression canonicalization
P4 JDK-8223444 Improve CodeHeap Free Space Management
P4 JDK-8223504 improve performance of forall loops by better inlining of "iterator()" methods.
P4 JDK-8250635 MethodArityHistogram should use Compile_lock in favour of fancy checks
P4 JDK-8261447 MethodInvocationCounters frequently run into overflow
P4 JDK-8226721 Missing intrinsics for Math.ceil, floor, rint
P4 JDK-8248043 Need to eliminate excessive i2l conversions
P4 JDK-8231460 Performance issue (CodeHeap) with large free blocks
P4 JDK-8264096 slowdebug jvm crashes when StrInflatedCopy match rule is not supported
P4 JDK-8263504 Some OutputMachOpcodes fields are uninitialized
P4 JDK-8222302 test/hotspot/jtreg/compiler/intrinsics/sha/cli/ fails on any other CPU
P4 JDK-8209459 TestSHA512MultiBlockIntrinsics failed on AArch64
P4 JDK-8217561 x86: Add floating-point Math.min/max intrinsics
P5 JDK-8232084 HotSpot build failed with GCC 9.2.1


Priority Bug Summary
P2 JDK-8264640 CMS ParScanClosure misses a barrier
P3 JDK-8265677 CMS: CardTableBarrierSet::write_ref_array_work() lacks storestore barrier
P3 JDK-8245511 G1 adaptive IHOP does not account for reclamation of humongous objects by young GC
P3 JDK-8267561 Shenandoah: Reference processing not properly setup for outside of cycle degenerated GC
P3 JDK-8266802 Shenandoah: Round up region size to page size unconditionally
P3 JDK-8265239 Shenandoah: Shenandoah heap region count could be off by 1
P4 JDK-8259983 do not use uninitialized expand_ms value in G1CollectedHeap::expand_heap_after_young_collection
P4 JDK-8246274 G1 old gen allocation tracking is not in a separate class
P4 JDK-8261752 Multiple GC test are missing memory requirements
P4 JDK-8261505 Test test/hotspot/jtreg/gc/parallel/ killed by Linux OOM Killer


Priority Bug Summary
P1 JDK-8265718 Build failure after JDK-8258414 11u backport
P2 JDK-8265750 Fatal error in safepoint.cpp after backport of 8258414
P3 JDK-8257569 Failure observed with JfrVirtualMemory::initialize
P3 JDK-8257621 JFR StringPool misses cached items across consecutive recordings
P3 JDK-8243452 JFR: Could not create chunk in repository with over 200 recordings
P3 JDK-8258414 OldObjectSample events too expensive
P3 JDK-8261354 SIGSEGV at MethodIteratorHost
P4 JDK-8262121 [11u] Redo 8244287: JFR: Methods samples have line number 0
P4 JDK-8249875 GCC 10 warnings -Wtype-limits with JFR code
P4 JDK-8255992 JFR EventWriter does not use first string from StringPool with id 0
P4 JDK-8261020 Wrong format parameter in create_emergency_chunk_path


Priority Bug Summary
P3 JDK-8217348 assert(thread->is_Java_thread()) failed: just checking
P4 JDK-8260926 Trace resource exhausted events unconditionally


Priority Bug Summary
P2 JDK-8267235 [macos_aarch64] InterpreterRuntime::throw_pending_exception messing up LR results in crash
P2 JDK-8253167 ARM32 builds fail after JDK-8247910
P2 JDK-8234355 Buffer overflow in jcmd GC.class_stats due to too many classes
P2 JDK-8213231 ThreadSnapshot::_threadObj can become stale
P3 JDK-8253572 [windows] CDS archive may fail to open with long file names
P3 JDK-8247354 AArch64: PopFrame causes assert(oopDesc::is_oop(obj)) failed: not an oop
P3 JDK-8213845 ARM32: Interpreter doesn't call result handler after native calls
P3 JDK-8213483 ARM32: runtime/ErrorHandling/ jtreg test fail
P3 JDK-8238175 CTW: Class.getDeclaredMethods fails with assert(k->is_subclass_of(SystemDictionary::Throwable_klass())) failed: invalid exception class
P3 JDK-8259786 initialize last parameter of getpwuid_r
P3 JDK-8208061 runtime/LoadClass/ fails with "Load factor too high" when running in CDS mode
P3 JDK-8261397 try catch Method failing to work when dividing an integer by 0
P3 JDK-8265537 x86 version string truncated after JDK-8249672 11u backport
P4 JDK-8241101 [s390] jtreg test failure after JDK-8238696: not conformant features string
P4 JDK-8256287 [windows] add loop fuse to map_or_reserve_memory_aligned
P4 JDK-8231841 AArch64: debug.cpp help() is missing an AArch64 line for pns
P4 JDK-8236992 AArch64: redundant load_klass in itable stub
P4 JDK-8266892 avoid maybe-uninitialized gcc warnings on linux s390x
P4 JDK-8265417 Backport of JDK-8249672 breaks Solaris x86 build
P4 JDK-8260236 better init AnnotationCollector _contended_group
P4 JDK-8233787 Break cycle in vm_version* includes
P4 JDK-8216184 CDS/appCDS tests failed on Windows due to long path to a classlist file
P4 JDK-8262163 Extend settings printout in jcmd VM.metaspace
P4 JDK-8239386 handle ContendedPaddingWidth in vm_version_aarch64
P4 JDK-8260030 Improve stringStream buffer handling
P4 JDK-8259843 initialize dli_fname array before calling dll_address_to_library_name
P4 JDK-8257604 JNI_ArgumentPusherVaArg leaks valist
P4 JDK-8244847 Linux/PPC: runtime/CompressedOops/CompressedClassPointers: smallHeapTest fails
P4 JDK-8207779 Method::is_valid_method() compares 'this' with NULL
P4 JDK-8249719 MethodHandle performance suffers from bad ResolvedMethodTable hash function
P4 JDK-8263557 Possible NULL dereference in Arena::destruct_contents()
P4 JDK-8263558 Possible NULL dereference in fast path arena free if ZapResourceArea is true
P4 JDK-8261167 print_process_memory_info add a close call after fopen
P4 JDK-8257828 SafeFetch may crash if invoked in non-JavaThreads
P4 JDK-8265690 Use the latest Ubuntu base image version in Docker testing


Priority Bug Summary
P4 JDK-8257988 Remove JNF dependency from libsaproc/MacosxDebuggerLocal.m


Priority Bug Summary
P4 JDK-8185734 [Windows] Structured Exception Catcher missing around gtest execution
P4 JDK-8213794 ARM32: disable TypeProfiling, CriticalJNINatives, Serviceablity tests for ARM32


Priority Bug Summary
P4 JDK-8257580 Bump update version for OpenJDK: jdk-11.0.12


Priority Bug Summary
P3 JDK-8261261 The version extra fields needs to be overridable in jib-profiles.js
P4 JDK-8264848 [macos] libjvm.dylib linker warning due to macOS version mismatch
P4 JDK-8223667 ASAN build broken
P4 JDK-8265666 Enable AIX build platform to make external debug symbols
P4 JDK-8250876 Fix issues with cross-compile on macos


Priority Bug Summary
P3 JDK-8266293 Key protection using PBEWithMD5AndDES fails with " Salt must be 8 bytes long"
P4 JDK-8264190 Harden TLS interop tests


Priority Bug Summary
P2 JDK-8263404 RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
P3 JDK-8257858 [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
P3 JDK-8076190 Customizing the generation of a PKCS12 keystore
P3 JDK-8268678 test fails as Let’s Encrypt Authority X3 is retired
P3 JDK-8243559 Remove root certificates with 1024-bit keys
P3 JDK-8225081 Remove Telia Company CA certificate expiring in April 2021
P3 JDK-8267599 Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u
P3 JDK-8237804 sun/security/mscapi tests fail with "Key pair not generated, alias already exists"
P3 JDK-8241960 The SHA3 message digests impl of SUN provider are not thread safe after cloned
P3 JDK-8266929 Unable to use algorithms from 3p providers
P3 JDK-8153005 Upgrade the default PKCS12 encryption/MAC algorithms
P4 JDK-8254717 isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
P4 JDK-8266220 keytool still prompt for store password on a password-less pkcs12 file if -storetype pkcs12 is specified


Priority Bug Summary
P4 JDK-8267721 Enable sun/security/pkcs11 tests for Amazon Linux 2 AArch64
P4 JDK-8265462 Handle multiple slots in the NSS Internal Module from SunPKCS11's Secmod
P4 JDK-8261355 No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding


Priority Bug Summary
P3 JDK-8254631 Better support ALPN byte wire values in SunJSSE
P3 JDK-8241248 NullPointerException in
P3 JDK-8226374 Restrict TLS signature schemes and named groups
P3 JDK-8241372 Several test failures due to Connection reset
P3 JDK-8206925 Support the certificate_authorities extension
P4 JDK-8259662 Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
P4 JDK-8259886 Improve SSL session cache performance and scalability
P4 JDK-8225438 javax/net/ssl/TLSCommon/ failed with Read timed out


Priority Bug Summary
P3 JDK-8240848 ArrayIndexOutOfBoundsException buf for TextCallbackHandler
P3 JDK-8256523 Streamline Java SHA2 implementation


Priority Bug Summary
P3 JDK-8257860 [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m
P4 JDK-8261481 Cannot read Kerberos settings in dynamic store on macOS Big Sur


Priority Bug Summary
P3 JDK-8207160 ClassReader::adjustMethodParams can potentially return null if the args list is empty
P3 JDK-8177068 incomplete classpath causes NPE in Flow


Priority Bug Summary
P3 JDK-8253948 Memory leak in ImageFileReader
P4 JDK-8219142 Remove unused JIMAGE_ResourcePath


Priority Bug Summary
P2 JDK-8242919 Paste locks up jshell
P3 JDK-8239536 Can't use `java.util.List` object after importing `java.awt.List`
P3 JDK-8213725 JShell NullPointerException due to class file with unexpected package
P3 JDK-8199646 JShell tests: jdk/jshell/ failed with java.lang.UnsupportedOperationException
P3 JDK-8247438 JShell: When FailOverExecutionControlProvider fails the proximal cause is not shown
P3 JDK-8237743 test/langtools/jdk/jshell/ fails No ExecutionControlProvider with name 'nonExistent' and parameter keys: []
P4 JDK-8262900 ToolBasicTest fails to access HTTP server it starts


Priority Bug Summary
P4 JDK-8215009 GCC 8 compilation error in libjli


Priority Bug Summary
P4 JDK-8235368 Update Commons BCEL to Version 6.4.1