RELEASE NOTES FOR: 11.0.17
====================================================================================================

Notes generated: Tue Apr 02 13:18:13 CEST 2024

Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry.

JAVA ENHANCEMENT PROPOSALS (JEP):

  None.

RELEASE NOTES:

core-libs/java.net:

    JDK-8278067: Make HttpURLConnection Default Keep Alive Timeout Configurable

      Two system properties have been added which control the keep alive behavior of
      HttpURLConnection in the case where the server does not specify a keep alive time. Two
      properties are defined for controlling connections to servers and proxies separately. They are
      `http.keepAlive.time.server` and `http.keepAlive.time.proxy` respectively. More information
      about them can be found in [Networking
      Properties](https://docs.oracle.com/en/java/javase/19/docs/api/java.base/java/net/doc-files/net-properties.html).

hotspot/runtime:

    JDK-8281181: CPU Shares Ignored When Computing Active Processor Count

      Previous JDK releases used an incorrect interpretation of the Linux cgroups parameter
      "cpu.shares". This might cause the JVM to use fewer CPUs than available, leading to an under
      utilization of CPU resources when the JVM is used inside a container.
      
      Starting from this JDK release, by default, the JVM no longer considers "cpu.shares" when
      deciding the number of threads to be used by the various thread pools. The
      `-XX:+UseContainerCpuShares` command-line option can be used to revert to the previous
      behavior. This option is deprecated and may be removed in a future JDK release. 

security-libs/java.security:

    JDK-8269039: Disabled SHA-1 Signed JARs

      JARs signed with SHA-1 algorithms are now restricted by default and treated as if they were
      unsigned. This applies to the algorithms used to digest, sign, and optionally timestamp the
      JAR. It also applies to the signature and digest algorithms of the certificates in the
      certificate chain of the code signer and the Timestamp Authority, and any CRLs or OCSP
      responses that are used to verify if those certificates have been revoked. These restrictions
      also apply to signed JCE providers.
      
      To reduce the compatibility risk for JARs that have been previously timestamped, there is one
      exception to this policy:
      
      - Any JAR signed with SHA-1 algorithms and timestamped prior to January 01, 2019 will not be
      restricted.
      
      This exception may be removed in a future JDK release. To determine if your signed JARs are
      affected by this change, run `jarsigner -verify -verbose -certs` on the signed JAR, and look
      for instances of "SHA1" or "SHA-1" and "disabled" and a warning that the JAR will be treated
      as unsigned in the output.
      
      For example:
      
      ``` -  Signed by "CN="Signer""      Digest algorithm: SHA-1 (disabled)      Signature
      algorithm: SHA1withRSA (disabled), 2048-bit key
      
      WARNING: The jar will be treated as unsigned, because it is signed with a weak algorithm that
      is now disabled by the security property:
      
      jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024, SHA1 denyAfter
      2019-01-01
      
      ```
      
      JARs affected by these new restrictions should be replaced or re-signed with stronger
      algorithms. 
      
      Users can, *at their own risk*, remove these restrictions by modifying the `java.security`
      configuration file (or override it by using the `java.security.properties` system property)
      and removing "SHA1 usage SignedJAR & denyAfter 2019-01-01" from the
      `jdk.certpath.disabledAlgorithms` security property and "SHA1 denyAfter 2019-01-01" from the
      `jdk.jar.disabledAlgorithms` security property.

    JDK-8267880: Upgrade the Default PKCS12 MAC Algorithm

      The default MAC algorithm used in a PKCS #12 keystore has been updated. The new algorithm is
      based on SHA-256 and is stronger than the old one based on SHA-1. See the security properties
      starting with `keystore.pkcs12` in the `java.security` file for detailed information.
      
      The new SHA-256 based MAC algorithms were introduced in the 11.0.12, 8u301, and 7u311 JDK
      versions. Keystores created using this newer, stronger, MAC algorithm cannot be opened in JDK
      versions earlier than 11.0.12, 8u301, and 7u311. A 'java.security.NoSuchAlgorithmException'
      exception will be thrown in such circumstances.
      
      For compatibility, use the `keystore.pkcs12.legacy` system property, which will revert the
      algorithms to use the older, weaker algorithms. There is no value defined for this property.

core-libs/java.time:

    JDK-8292579: Update Timezone Data to 2022c

      This version includes changes from 2022b that merged multiple regions that have the same
      timestamp data post-1970 into a single time zone database.  All time zone IDs remain the same
      but the merged time zones will point to a shared zone database.
      
      As a result, pre-1970 data may not be compatible with earlier JDK versions.  The affected
      zones are ```Antarctica/Vostok, Asia/Brunei, Asia/Kuala_Lumpur, Atlantic/Reykjavik,
      Europe/Amsterdam, Europe/Copenhagen, Europe/Luxembourg, Europe/Monaco, Europe/Oslo,
      Europe/Stockholm, Indian/Christmas, Indian/Cocos, Indian/Kerguelen, Indian/Mahe,
      Indian/Reunion, Pacific/Chuuk, Pacific/Funafuti, Pacific/Majuro, Pacific/Pohnpei,
      Pacific/Wake, Pacific/Wallis, Arctic/Longyearbyen, Atlantic/Jan_Mayen, Iceland,
      Pacific/Ponape, Pacific/Truk, and Pacific/Yap```.
      
      For more details, refer to the announcement of
      [2022b](https://mm.icann.org/pipermail/tz-announce/2022-August/000071.html)

core-libs/java.io:serialization:

    JDK-8261160: JDK Flight Recorder Event for Deserialization

      A new JDK Flight Recorder (JFR) event has been added to monitor deserialization of objects.
      When JFR is enabled and the JFR configuration includes deserialization events, JFR will emit
      an event whenever the running program attempts to deserialize an object. The deserialization
      event is named `java/deserialization`, and it is disabled by default. The deserialization
      event contains information that is used by the serialization filter mechanism. Additionally,
      if a filter is enabled, the JFR event indicates whether the filter accepted or rejected
      deserialization of the object. 
      
      The new Deserialization Event captures:
      
      * Whether a serialization filter is configured or not. * The serialization filter status, if
      one is configured. * The class of the object being deserialized. * The number of array
      elements when deserializing an array. * The current graph depth. * The current number of
      object references. * The current number of bytes in the stream that have been consumed. * The
      exception type and message, if thrown by the serialization filter.
      
      Refer to [Context-Specific Deserialization
      Filter](https://bugs.openjdk.org/browse/JDK-8268701) and [Serialization Filtering
      Guide](https://docs.oracle.com/en/java/javase/11/core/serialization-filtering1.html#GUID-3ECB288D-E5BD-4412-892F-E9BB11D4C98A)
      for details. 

    JDK-8261160: JDK Flight Recorder Event for Deserialization

      It is now possible to monitor deserialization of objects using JDK Flight Recorder (JFR). When
      JFR is enabled and the JFR configuration includes deserialization events, JFR will emit an
      event whenever the running program attempts to deserialize an object. The deserialization
      event is named `jdk.Deserialization`, and it is disabled by default. The deserialization event
      contains information that is used by the serialization filter mechanism; see the
      [ObjectInputFilter](https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/io/ObjectInputFilter.html)
      specification. Additionally, if a filter is enabled, the JFR event indicates whether the
      filter accepted or rejected deserialization of the object. For further information about how
      to use the JFR deserialization event, see the article [Monitoring Deserialization to Improve
      Application Security](https://inside.java/2021/03/02/monitoring-deserialization-activity-in-the-jdk/).
      For reference information about using and configuring JFR, see the [JFR Runtime
      Guide](https://docs.oracle.com/javacomponents/jmc-5-5/jfr-runtime-guide/preface_jfrrt.htm#JFRRT165)
      and [JFR Command
      Reference](https://docs.oracle.com/javacomponents/jmc-5-5/jfr-command-reference/command-line-options.htm#JFRCR-GUID-FE61CA60-E1DF-460E-A8E0-F4FF5D58A7A0)
      sections of the JDK Mission Control documentation. 

    JDK-8261160: JDK Flight Recorder Event for Deserialization

      It is now possible to monitor deserialization of objects using JDK Flight Recorder (JFR). When
      JFR is enabled and the JFR configuration includes deserialization events, JFR will emit an
      event whenever the running program attempts to deserialize an object. The deserialization
      event is named `jdk.Deserialization`, and it is disabled by default. The deserialization event
      contains information that is used by the serialization filter mechanism; see the
      [ObjectInputFilter](https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/io/ObjectInputFilter.html)
      specification. Additionally, if a filter is enabled, the JFR event indicates whether the
      filter accepted or rejected deserialization of the object. For further information about how
      to use the JFR deserialization event, see the article [Monitoring Deserialization to Improve
      Application Security](https://inside.java/2021/03/02/monitoring-deserialization-activity-in-the-jdk/).
      For reference information about using and configuring JFR, see the [JFR Runtime
      Guide](https://docs.oracle.com/javacomponents/jmc-5-5/jfr-runtime-guide/preface_jfrrt.htm#JFRRT165)
      and [JFR Command
      Reference](https://docs.oracle.com/javacomponents/jmc-5-5/jfr-command-reference/command-line-options.htm#JFRCR-GUID-FE61CA60-E1DF-460E-A8E0-F4FF5D58A7A0)
      sections of the JDK Mission Control documentation.

security-libs/org.ietf.jgss:krb5:

    JDK-8139348: Deprecate 3DES and RC4 in Kerberos

      The `des3-hmac-sha1` and `rc4-hmac` Kerberos encryption types (etypes) are now deprecated and
      disabled by default. Users can set `allow_weak_crypto = true` in the `krb5.conf` configuration
      file to re-enable them (along with other weak etypes including `des-cbc-crc` and
      `des-cbc-md5`) at their own risk. To disable a subset of the weak etypes, users can list
      preferred etypes explicitly in any of the `default_tkt_enctypes`, `default_tgs_enctypes`, or
      `permitted_enctypes` settings.


ALL FIXED ISSUES, BY COMPONENT AND PRIORITY:

client-libs:
  (P4) JDK-8283712: Create a manual test framework class
  (P4) JDK-8284898: Enhance PassFailJFrame
  (P4) JDK-8270312: Error: Not a test or directory containing tests: java/awt/print/PrinterJob/XparColor.java
  (P4) JDK-8284535: Fix PrintLatinCJKTest.java test that is failing with Parse Exception
  (P4) JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix test

client-libs/2d:
  (P3) JDK-8290334: Update FreeType to 2.12.1
  (P3) JDK-8289853: Update HarfBuzz to 4.4.1
  (P4) JDK-8255724: [XRender] the BlitRotateClippedArea test fails on Linux in the XR pipeline
  (P4) JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks charset

client-libs/java.awt:
  (P4) JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14 & jdk7
  (P4) JDK-8281569: Create tests for Frame.setMinimumSize() method
  (P4) JDK-8159694: HiDPI, Unity, java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
  (P4) JDK-8288928: Incorrect GPL header in pnglibconf.h (backport of JDK-8185041)
  (P4) JDK-8169468: NoResizeEventOnDMChangeTest.java fails because FS Window didn't receive all resizes!
  (P4) JDK-8284956: Potential leak awtImageData/color_data when initializes X11GraphicsEnvironment
  (P4) JDK-8225122: Test AncestorResized.java fails when Windows desktop is scaled.

client-libs/javax.accessibility:
  (P4) JDK-8282933: Create a test for JDK-4529616
  (P4) JDK-8283245: Create a test for JDK-4670319
  (P4) JDK-8283015: Create a test for JDK-4715496
  (P4) JDK-8283087: Create a test or JDK-4715503
  (P4) JDK-8284077: Create an automated test for JDK-4170173
  (P4) JDK-8285693: Create an automated test for JDK-4702199

client-libs/javax.imageio:
  (P4) JDK-7131823: bug in GIFImageReader

client-libs/javax.swing:
  (P3) JDK-8239902: [macos] Remove direct usage of JSlider, JProgressBar classes in CAccessible class
  (P3) JDK-8212904: JTextArea line wrapping incorrect when using UI scale
  (P4) JDK-8281738: Create a regression test for checking the 'Space' key activation of focused Button
  (P4) JDK-8282548: Create a regression test for JDK-4330998
  (P4) JDK-8281745: Create a regression test for JDK-4514331
  (P4) JDK-8282343: Create a regression test for JDK-4518432
  (P4) JDK-8282234: Create a regression test for JDK-4532513
  (P4) JDK-8281988: Create a regression test for JDK-4618767
  (P4) JDK-8281535: Create a regression test for JDK-4670051
  (P4) JDK-8280913: Create a regression test for JRootPane.setDefaultButton() method
  (P4) JDK-8283507: Create a regression test for RFE 4287690
  (P4) JDK-8282789: Create a regression test for the JTree usecase of JDK-4618767
  (P4) JDK-8283623: Create an automated regression test for JDK-4525475
  (P4) JDK-8283493: Create an automated regression test for RFE 4231298
  (P4) JDK-8283624: Create an automated regression test for RFE-4390885
  (P4) JDK-8262085: Hovering Metal HTML Tooltips in different windows cause IllegalArgExc on Linux
  (P4) JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The selected index should be "aad"
  (P4) JDK-8283621: Write a regression test for CCC4400728
  (P4) JDK-8282860: Write a regression test for JDK-4164779

core-libs:
  (P3) JDK-8287663: Add a regression test for JDK-8287073
  (P4) JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
  (P4) JDK-8267180: Typo in copyright header  for HashesTest

core-libs/java.io:
  (P3) JDK-8266460: java.io tests fail on null stream with upgraded jtreg/TestNG

core-libs/java.io:serialization:
  (P3) JDK-8261160: Add a deserialization JFR event

core-libs/java.lang:
  (P3) JDK-8265020: tests must be updated for new TestNG module name
  (P4) JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails on Alpine/musl
  (P4) JDK-8183372: Refactor java/lang/Class shell tests to java
  (P4) JDK-8266774: System property values for stdout/err on Windows UTF-8

core-libs/java.net:
  (P3) JDK-8266250: WebSocketTest and WebSocketProxyTest call assertEquals(List<byte[]>, List<byte[]>)
  (P4) JDK-8290886: [11u]: Backport of JDK-8266250 introduced test failures
  (P4) JDK-8278067: Make HttpURLConnection default keep alive timeout configurable

core-libs/java.nio:
  (P4) JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
  (P4) JDK-8264400: (fs) WindowsFileStore equality depends on how the FileStore was constructed
  (P4) JDK-8265100: (fs) WindowsFileStore.hashCode() should read cached hash code once

core-libs/java.rmi:
  (P4) JDK-8286114: [test] show real exception in bomb call in sun/rmi/runtime/Log/checkLogging/CheckLogging.java

core-libs/java.text:
  (P4) JDK-8264792: The NumberFormat for locale sq_XK formats price incorrectly.

core-libs/java.time:
  (P3) JDK-8292579: (tz) Update Timezone Data to 2022c

core-libs/java.util:
  (P4) JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java fails with expected [true] but found [false]

core-libs/java.util.concurrent:
  (P4) JDK-8214427: probable bug in logic of ConcurrentHashMap.addCount()

core-libs/java.util.jar:
  (P4) JDK-8286582: Build fails on macos aarch64 when using --with-zlib=bundled
  (P4) JDK-8288763: Pack200 extraction failure with invalid size 

core-libs/java.util.regex:
  (P4) JDK-8247546: Pattern matching does not skip correctly over supplementary characters

core-libs/java.util:i18n:
  (P3) JDK-8283277: ISO 4217 Amendment 171 Update
  (P3) JDK-8289549: ISO 4217 Amendment 172 Update
  (P3) JDK-8272352: Java launcher can not parse Chinese character when system locale is set to UTF-8
  (P4) JDK-8028265: Add legacy tz tests to OpenJDK
  (P4) JDK-8238203: Return value of GetUserDefaultUILanguage() should be handled as LANGID

core-libs/javax.naming:
  (P4) JDK-8287672: jtreg test com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails intermittently in nightly run

core-libs/jdk.nashorn:
  (P4) JDK-8290813: jdk/nashorn/api/scripting/test/ScriptObjectMirrorTest.java fails: assertEquals is ambiguous

core-svc/debugger:
  (P3) JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails with "Prompt is not received during 300200 milliseconds"
  (P4) JDK-8274687: JDWP deadlocks if some Java thread reaches wait in blockOnDebuggerSuspend

core-svc/java.lang.management:
  (P4) JDK-8283903: GetContainerCpuLoad does not return the correct result in share mode

docs:
  (P4) JDK-8251551: Use .md filename extension for README

hotspot/compiler:
  (P1) JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime() after JDK-8289060
  (P2) JDK-8288865: [aarch64] LDR instructions must use legitimized addresses
  (P2) JDK-8235870: C2 crashes in IdealLoopTree::est_loop_flow_merge_sz()
  (P2) JDK-8287432: C2: assert(tn->in(0) != __null) failed: must have live top node
  (P2) JDK-8288360: CI: ciInstanceKlass::implementor() is not consistent for well-known classes
  (P2) JDK-8282555: Missing memory edge when spilling MoveF2I, MoveD2L etc
  (P3) JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
  (P3) JDK-8291713: assert(!phase->exceeding_node_budget()) failed: sanity after JDK-8223389
  (P3) JDK-8284944: assert(cnt++ < 40) failed: infinite cycle in loop optimization
  (P3) JDK-8287223: C1: Inlining attempt through MH::invokeBasic() with null receiver 
  (P3) JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too small
  (P3) JDK-8286177: C2: "failed: non-reduction loop contains reduction nodes" assert failure
  (P3) JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over projections
  (P3) JDK-8285820: C2: LCM prioritizes locally dependent CreateEx nodes over projections after 8270090
  (P3) JDK-8279622: C2: miscompilation of map pattern as a vector reduction
  (P3) JDK-8283441: C2: segmentation fault in ciMethodBlocks::make_block_at(int)
  (P3) JDK-8269517: compiler/loopopts/TestPartialPeelingSinkNodes.java crashes with -XX:+VerifyGraphEdges
  (P3) JDK-8258946: Fix optimization-unstable code involving signed integer overflow
  (P3) JDK-8288467: remove memory_operand assert for spilled instructions
  (P3) JDK-8284882: SIGSEGV in Node::verify_edges due to compilation bailout
  (P3) JDK-8290246: test fails "assert(init != __null) failed: initialization not found"
  (P3) JDK-8286314: Trampoline not created for far runtime targets outside small CodeCache
  (P3) JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/TestDescription.java crashes intermittently
  (P4) JDK-8277893: Arraycopy stress tests
  (P4) JDK-8279032: compiler/loopopts/TestSkeletonPredicateNegation.java times out with -XX:TieredStopAtLevel < 4
  (P4) JDK-8271078: jdk/incubator/vector/Float128VectorTests.java failed a subtest

hotspot/gc:
  (P3) JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java expectedNewSize calculation
  (P3) JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java timed out
  (P3) JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in some configs
  (P3) JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
  (P3) JDK-8290198: Shenandoah: a few Shenandoah tests failure after  JDK-8214799 11u backport 
  (P4) JDK-8223575: add subspace transitions to gc+metaspace=info log lines
  (P4) JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java to use jtreg @requires
  (P4) JDK-8217332: JTREG: Clean up, use generics instead of raw types

hotspot/jfr:
  (P3) JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC
  (P3) JDK-8287463: JFR: Disable TestDevNull.java on Windows
  (P3) JDK-8282947: JFR: Dump on shutdown live-locks in some conditions
  (P3) JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
  (P4) JDK-8242188: error in jtreg test jdk/jfr/api/consumer/TestRecordedFrame.java on linux-aarch64
  (P4) JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with -XX:-TieredCompilation

hotspot/jvmti:
  (P4) JDK-6606767: resexhausted00[34] fail assert(!thread->owns_locks(), "must release all locks when leaving VM")
  (P4) JDK-8278519: serviceability/jvmti/FieldAccessWatch/FieldAccessWatch.java failed "assert(handle != __null) failed: JNI handle should not be null"
  (P4) JDK-8249623: test @ignore-d due to 7013634 should be returned back to execution
  (P4) JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003 and 004 use wrong path to test classes

hotspot/runtime:
  (P3) JDK-8289799: Build warning in methodData.cpp memset zero-length parameter
  (P3) JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts with freezer controller
  (P3) JDK-8281181: Do not use CPU Shares to compute active processor count
  (P3) JDK-8273526: Extend the OSContainer API  pids controller with pids.current
  (P3) JDK-8266490: Extend the OSContainer API to support the pids controller of cgroups
  (P3) JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer controller) was incomplete
  (P3) JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on muslc
  (P3) JDK-8284754: print more interesting env variables in hs_err and VM.info
  (P3) JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails with NullPointerException when running in CDS mode
  (P3) JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
  (P4) JDK-8292852: [11u] TestMemoryWithCgroupV1  fails after JDK-8292768
  (P4) JDK-8284758: [linux] improve print_container_info
  (P4) JDK-8284950: CgroupV1 detection code should consider memory.swappiness
  (P4) JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
  (P4) JDK-8253916: ResourceExhausted/resexhausted001 crashes on Linux-x64
  (P4) JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted001/TestDescription.java shouldn't use timeout

hotspot/svc:
  (P3) JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee

hotspot/svc-agent:
  (P3) JDK-8238268: Many SA tests are not running on OSX because they do not attempt to use sudo when available
  (P3) JDK-8238196: tests that use SA Attach should not be allowed to run against signed binaries on Mac OS X 10.14.5 and later

hotspot/test:
  (P4) JDK-8219149: ProcessTools.ProcessBuilder should print timing info for subprocesses
  (P4) JDK-8274506: TestPids.java and TestPidsLimit.java fail with podman run as root
  (P4) JDK-8210107: vmTestbase/nsk/stress/network tests fail with Cannot assign requested address (Bind failed)

infrastructure:
  (P3) JDK-8268185: Update GitHub Actions for jtreg 6
  (P3) JDK-8266254: Update to use jtreg 6
  (P4) JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17

infrastructure/build:
  (P3) JDK-8287366: Improve test failure reporting in GHA
  (P3) JDK-8218413: make reconfigure ignores configure-time AUTOCONF environment variable
  (P3) JDK-8252145: Unify Info.plist files with correct version strings
  (P4) JDK-8291794: [11u] Corrections after backport of JDK-8212028
  (P4) JDK-8210960: Allow --with-boot-jdk-jvmargs to work during configure
  (P4) JDK-8285728: Alpine Linux build fails with busybox tar
  (P4) JDK-8290000: Bump macOS GitHub actions to macOS 11
  (P4) JDK-8265531: doc/building.md should mention homebrew install freetype
  (P4) JDK-8287202: GHA: Add macOS aarch64 to the list of default platforms for workflow_dispatch event
  (P4) JDK-8287336: GHA: Workflows break on patch versions
  (P4) JDK-8283017: GHA: Workflows break with update release versions
  (P4) JDK-8275008: gtest build failure due to stringop-overflow warning with gcc11
  (P4) JDK-8233712: Limit default tests jobs based on ulimit -u setting
  (P4) JDK-8221907: make reconfigure breaks when configured with relative paths
  (P4) JDK-8254178: Remove .hgignore
  (P4) JDK-8254318: Remove .hgtags

infrastructure/release_eng:
  (P4) JDK-8295057: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17

security-libs:
  (P3) JDK-8285380: Fix typos in security
  (P3) JDK-8282538: PKCS11 tests fail on CentOS Stream 9
  (P4) JDK-8279385: [test]  Adjust sun/security/pkcs12/KeytoolOpensslInteropTest.java after 8278344
  (P4) JDK-8278344: sun/security/pkcs12/KeytoolOpensslInteropTest.java test fails because of different openssl output

security-libs/java.security:
  (P2) JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg'  is null
  (P2) JDK-8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names
  (P3) JDK-8269039: Disable SHA-1 Signed JARs
  (P3) JDK-8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled
  (P3) JDK-8267880: Upgrade the default PKCS12 MAC algorithm

security-libs/javax.crypto:
  (P3) JDK-8281628: KeyAgreement : generateSecret intermittently not resetting

security-libs/javax.net.ssl:
  (P4) JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
  (P4) JDK-8266881: Enable debug log for SSLEngineExplorerMatchedSNI.java
  (P4) JDK-8226976: SessionTimeOutTests uses == operator for String value check
  (P4) JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption

security-libs/javax.smartcardio:
  (P3) JDK-8286211: Update PCSC-Lite for SUSE Linux to 1.9.5

security-libs/javax.xml.crypto:
  (P3) JDK-8247964: All log0() in com/sun/org/slf4j/internal/Logger.java should be private
  (P3) JDK-8247907: XMLDsig logging does not work

security-libs/jdk.security:
  (P4) JDK-8293429: [11u] minor update in attribute style
  (P4) JDK-8285398: Cache the results of constraint checks

security-libs/org.ietf.jgss:
  (P4) JDK-8253829: Wrong length compared in SSPI bridge

security-libs/org.ietf.jgss:krb5:
  (P3) JDK-8139348: Deprecate 3DES and RC4 in Kerberos

tools/javac:
  (P2) JDK-8203277: preflow visitor used during lambda attribution shouldn't visit class definitions inside the lambda body
  (P3) JDK-8236490: Compiler bug relating to @NonNull annotation
  (P3) JDK-8193462: Fix Filer handling of package-info initial elements
  (P4) JDK-8255729: com.sun.tools.javac.processing.JavacFiler.FilerOutputStream  is inefficient
  (P4) JDK-8266675: Optimize IntHashTable for encapsulation and ease of use

tools/javadoc(tool):
  (P3) JDK-8215291: Broken links when generating from project without modules
  (P3) JDK-8221871: javadoc should not set role=region on <section> elements
  (P3) JDK-8282214: Upgrade JQuery to version 3.6.0
  (P3) JDK-8284367: Upgrade JQuery UI to 1.13.1 from 1.12.1
  (P4) JDK-8236823: Ensure that API documentation uses minified libraries
  (P4) JDK-8209052: Low contrast in docs/api/constant-values.html

tools/jlink:
  (P3) JDK-8240903: Add test to check that jmod hashes are reproducible 
  (P3) JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static @Test methods

xml:
  (P5) JDK-8285097: Duplicate XML keys in XPATHErrorResources.java and XSLTErrorResources.java

xml/javax.xml.xpath:
  (P5) JDK-8289471: Issue in Initialization of keys in ErrorMsg.java and XPATHErrorResources.java

xml/jaxp:
  (P3) JDK-8289486: Improve XSLT XPath operators count efficiency
  (P4) JDK-8285081: Improve XPath operators count accuracy
  (P4) JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3 generate incorrect messages upon failure
  (P4) JDK-8282280: Update Xerces2 Java to Version 2.12.2