RELEASE NOTES: JDK 11.0.8

Notes generated: Mon Dec 02 15:36:10 CET 2024

JEPs

None.

RELEASE NOTES

security-libs/javax.net.ssl

Issue Description
JDK-8237474

Default SSLEngine Should Create in Server Role


In JDK 11 and later, javax.net.ssl.SSLEngine by default used client mode when handshaking. As a result, the set of default enabled protocols may differ to what is expected. SSLEngine would usually be used in server mode. From this JDK release onwards, SSLEngine will default to server mode. The javax.net.ssl.SSLEngine.setUseClientMode​(boolean mode) method may be used to configure the mode.
JDK-8242141

New System Properties to Configure the TLS Signature Schemes


Two new system properties have been added to customize the TLS signature schemes in JDK. jdk.tls.client.SignatureSchemes has been added for the TLS client side, and jdk.tls.server.SignatureSchemes has been added for the server side.

Each system property contains a comma-separated list of supported signature scheme names specifying the signature schemes that could be used for the TLS connections.

The names are described in the "Signature Schemes" section of the Java Security Standard Algorithm Names Specification.

security-libs/javax.crypto:pkcs11

Issue Description
JDK-8238555

SunPKCS11 Initialization With NSS When External FIPS Modules Are in Security Modules Database


The SunPKCS11 security provider can now be initialized with NSS when FIPS-enabled external modules are configured in the Security Modules Database (NSSDB). Before this change, when such a library was configured for NSS in non-FIPS mode, the SunPKCS11 provider would throw a RuntimeException with the message "FIPS flag set for non-internal module".

This change allows the JDK to work properly with recent NSS releases in GNU/Linux operating systems when the system-wide FIPS policy is turned on.

client-libs/java.awt

Issue Description
JDK-8211301

Deprecated NSWindowStyleMaskTexturedBackground


After an upgrade of the macOS SDK used to build the JDK, the behavior of the apple.awt.brushMetalLook and textured Swing properties has changed. When these properties are set, the title of the frame is still visible. It is recommended that the apple.awt.transparentTitleBar property be set to true to make the title of the frame invisible again. The apple.awt.fullWindowContent property can also be used.

Please note that Textured window support was implemented by using the NSTexturedBackgroundWindowMask value of NSWindowStyleMask. However, this was deprecated in macOS 10.12 along with NSWindowStyleMaskTexturedBackground, which was deprecated in macOS 10.14.

For additional information, refer to the following documentation: - apple.awt.brushMetalLook: https://developer.apple.com/documentation/appkit/nstexturedbackgroundwindowmask?language=objc - apple.awt.transparentTitleBar: https://developer.apple.com/documentation/appkit/nswindow/1419167-titlebarappearstransparent?language=objc - apple.awt.fullWindowContent: https://developer.apple.com/documentation/appkit/nsfullsizecontentviewwindowmask

security-libs/java.security

Issue Description
JDK-8225069

Removal of Comodo Root CA Certificate


The following expired Comodo root CA certificate has been removed from the cacerts keystore: ``` + alias name "addtrustclass1ca [jdk]"

Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE ```
JDK-8225068

Removal of DocuSign Root CA Certificate


The following expired DocuSign root CA certificate has been removed from the cacerts keystore: ``` + alias name "keynectisrootca [jdk]"

Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR ```

FIXED ISSUES

client-libs

Priority Bug Summary
P3 JDK-8235638 NPE in LWWindowPeer.getOnscreenGraphics()

client-libs/2d

Priority Bug Summary
P3 JDK-8221741 ClassCastException can happen when fontconfig.properties is used
P3 JDK-8214481 freetype path does not disable TrueType hinting with AA+FM hints
P3 JDK-8238942 Rendering artifacts with LCD text and fractional metrics
P3 JDK-8234398 Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
P3 JDK-8224109 Text spaced incorrectly by drawString under rotation with fractional metrics
P3 JDK-8209113 Use WeakReference for lastFontStrike for created Fonts
P4 JDK-6933331 (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
P4 JDK-8232226 [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
P4 JDK-8175984 ICC_Profile has un-needed, not-empty finalize method
P4 JDK-8236996 Incorrect Roboto font rendering on Windows with subpixel antialiasing
P4 JDK-8223935 PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
P4 JDK-8239091 Reversed arguments in call to strstr in freetype "debug" code.
P4 JDK-8196181 sun/java2d/GdiRendering/InsetClipping.java fails

client-libs/java.awt

Priority Bug Summary
P2 JDK-8234522 [macos] Crash with use of native file dialog
P2 JDK-8242174 [macos] The NestedModelessDialogTest test make the macOS unstable
P2 JDK-8242498 Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
P3 JDK-8231438 [macOS] Dark mode for the desktop is not supported
P3 JDK-8211301 [macos] support full window content options
P3 JDK-8235620 Broken merge between JDK-8006406 and JDK-8003559
P3 JDK-8238575 DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
P3 JDK-8176359 Frame#setMaximizedbounds not working properly in multi screen environments
P3 JDK-8221823 Requested JDialog width is ignored
P3 JDK-8231564 setMaximizedBounds is broken with large display scale and multiple monitors
P3 JDK-8225126 Test SetBoundsPaintTest.html failed on Windows when desktop is scaled
P4 JDK-8226806 [macOS 10.14] Methods of Java Robot should be called from appropriate thread
P4 JDK-8039082 [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
P4 JDK-8236545 Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
P4 JDK-8240518 Incorrect JNU_ReleaseStringPlatformChars in Windows Print
P4 JDK-8198000 java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
P4 JDK-8198001 java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
P4 JDK-8196019 java/awt/Window/Grab/GrabTest.java fails on Windows
P4 JDK-8235739 Rare NPE at WComponentPeer.getGraphics()
P4 JDK-8233707 systemScale.cpp could not compile with VS2019
P4 JDK-8223108 Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
P4 JDK-8234137 The "AutoTestOnTop.java" test may run external applications
P4 JDK-8233573 Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
P4 JDK-8239819 XToolkit: Misread of screen information memory

client-libs/javax.accessibility

Priority Bug Summary
P3 JDK-8226253 JAWS reports wrong number of radio buttons when buttons are hidden
P4 JDK-8240512 backport of 8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent

client-libs/javax.imageio

Priority Bug Summary
P3 JDK-8238842 AIOOBE in GIFImageReader.initializeStringTable

client-libs/javax.sound

Priority Bug Summary
P4 JDK-8238738 AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
P4 JDK-8221445 FastSysexMessage constructor crashes MIDI receiption thread

client-libs/javax.swing

Priority Bug Summary
P2 JDK-8236953 [macos] JavaFX SwingNode is not rendered on macOS
P3 JDK-8040630 Popup menus and tooltips flicker with previous popup contents when first shown
P4 JDK-8240792 [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
P4 JDK-8240202 A few client tests leave mouse buttons pressed
P4 JDK-7124307 JSpinner and changing value by mouse
P4 JDK-8198339 Test javax/swing/border/Test6981576.java is unstable

core-libs

Priority Bug Summary
P4 JDK-8243539 Copyright info (Year) should be updated for fix of 8241638

core-libs/java.lang

Priority Bug Summary
P3 JDK-8146090 java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
P3 JDK-8239893 Windows handle Leak when starting processes using ProcessBuilder
P4 JDK-8242154 Backport parts of JDK-4947890 to OpenJDK 11u
P4 JDK-8210788 Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
P4 JDK-8239365 ProcessBuilder test modifications for AIX execution
P4 JDK-8232846 ProcessHandle.Info command with non-English shows question marks

core-libs/java.lang.invoke

Priority Bug Summary
P3 JDK-8233920 MethodHandles::tryFinally generates illegal bytecode for long/double return types

core-libs/java.net

Priority Bug Summary
P3 JDK-8210147 adjust some WSAGetLastError usages in windows network coding
P3 JDK-8203672 JNI exception pending in PlainSocketImpl.c
P3 JDK-8183369 RFC unconformity of HttpURLConnection with proxy
P3 JDK-8244853 The static build of libextnet is missing the JNI_OnLoad_extnet function
P4 JDK-8191169 java/net/Authenticator/B4769350.java failed intermittently
P4 JDK-8231631 sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
P4 JDK-8229421 The logic of java/net/ipv6tests/TcpTest.java is flawed

core-libs/java.nio

Priority Bug Summary
P4 JDK-8044365 (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
P4 JDK-8241568 (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"

core-libs/java.nio.charsets

Priority Bug Summary
P3 JDK-8235834 IBM-943 charset encoder needs updating
P3 JDK-8242541 Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
P4 JDK-8239965 XMLEncoder/Test4625418.java fails due to "Error: Cp943 - can't read properly"

core-libs/java.text

Priority Bug Summary
P4 JDK-8231213 Migrate SimpleDateFormatConstTest to JDK Repo

core-libs/java.time

Priority Bug Summary
P3 JDK-8243541 (tz) Upgrade Timezone Data to tzdata2020a

core-libs/java.util.jar

Priority Bug Summary
P3 JDK-8239351 Give more meaningful InternalError messages in Deflater.c

core-libs/java.util:collections

Priority Bug Summary
P4 JDK-8205399 Set node color on pinned HashMap.TreeNode deletion

core-libs/javax.naming

Priority Bug Summary
P2 JDK-8217606 LdapContext#reconnect always opens a new connection
P3 JDK-8214440 ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"

core-svc/debugger

Priority Bug Summary
P3 JDK-8193879 Java debugger hangs on method invocation
P4 JDK-8239055 Wrong implementation of VMState.hasListener

core-svc/java.lang.instrument

Priority Bug Summary
P4 JDK-8234968 check calloc rv in libinstrument InvocationAdapter

core-svc/javax.management

Priority Bug Summary
P3 JDK-8242239 [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
P4 JDK-8206179 com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value

core-svc/tools

Priority Bug Summary
P4 JDK-8240711 TestJstatdPort.java failed due to "ExportException: Port already in use:"

hotspot/compiler

Priority Bug Summary
P2 JDK-8210284 "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
P2 JDK-8245047 [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
P2 JDK-8232106 [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
P2 JDK-8231118 ARM32: Math tests failures
P2 JDK-8217230 assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types()
P2 JDK-8233033 C2 produces wrong result while unswitching a loop due to lost control dependencies
P2 JDK-8235984 C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
P2 JDK-8237859 C2: Crash when loads float above range check
P2 JDK-8231550 C2: ShouldNotReachHere() in verify_strip_mined_scheduling
P2 JDK-8216541 CompiledICHolders of VM locked unloaded nmethods are released too late
P2 JDK-8211392 compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
P2 JDK-8224931 disable JAOTC invokedynamic support until 8223533 is fixed
P2 JDK-8240576 JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
P2 JDK-8244407 JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
P2 JDK-8240227 Loop predicates should be copied to unswitched loops
P2 JDK-8241900 Loop unswitching may cause dependence on null check to be lost
P2 JDK-8241556 Memory leak if -XX:CompileCommand is set
P2 JDK-8235452 Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
P3 JDK-8211743 [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames
P3 JDK-8236211 [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
P3 JDK-8216151 [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
P3 JDK-8237086 assert(is_MachReturn()) running CTW with fix for JDK-8231291
P3 JDK-8240905 assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
P3 JDK-8214862 assert(proj != __null) at compile.cpp:3251
P3 JDK-8229855 C2 fails with assert(false) failed: bad AD file
P3 JDK-8209439 C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
P3 JDK-8239142 C2's UseUniqueSubclasses optimization is broken for array accesses
P3 JDK-8208277 Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
P3 JDK-8211332 code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
P3 JDK-8238356 CodeHeap::blob_count() overestimates the number of blobs
P3 JDK-8239852 java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
P3 JDK-8235762 JVM crash in SWPointer during C2 compilation
P3 JDK-8237045 JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
P3 JDK-8242108 Performance regression after fix for JDK-8229496
P3 JDK-8238765 PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
P3 JDK-8225653 Provide more information when hitting SIGILL from HaltNode
P3 JDK-8245649 Revert 8245397 backport of 8230591
P3 JDK-8236759 ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
P3 JDK-8231720 Some perf regressions after 8225653
P3 JDK-8235332 TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
P3 JDK-8215555 TieredCompilation C2 threads can excessively block handshakes
P3 JDK-8226198 use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
P3 JDK-8235584 UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
P4 JDK-8187078 -XX:+VerifyOops finds numerous problems when running JPRT
P4 JDK-8225622 [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
P4 JDK-8241458 [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
P4 JDK-8238190 [JVMCI] Fix single implementor speculation for diamond shapes.
P4 JDK-8239456 [win][x86] vtable stub generation: assert failure (code size estimate)
P4 JDK-8239931 [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
P4 JDK-8230591 AArch64: Missing intrinsics for Math.ceil, floor, rint
P4 JDK-8213947 ARM32: failed check_simd should set UsePopCountInstruction to false
P4 JDK-8238756 C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
P4 JDK-8216154 C4819 warnings at HotSpot sources on Windows
P4 JDK-8234146 compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
P4 JDK-8237951 CTW: C2 compilation fails with "malformed control flow"
P4 JDK-8217447 Develop flag TraceICs is broken
P4 JDK-8233364 Fix undefined behavior in Canonicalizer::do_ShiftOp
P4 JDK-8240220 IdealLoopTree::dump_head predicate printing is broken
P4 JDK-8221482 Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
P4 JDK-8229158 make UseSwitchProfiling non-experimental or false by-default
P4 JDK-8226879 Memory leak in Type::hashcons
P4 JDK-8215551 Missing case label in nmethod::reloc_string_for()
P4 JDK-8022574 remove HaltNode code after uncommon trap calls
P4 JDK-8240223 Use consistent predicate order in and with PhaseIdealLoop::find_predicate
P4 JDK-8214444 Wrong strncat limits in dfa.cpp
P5 JDK-8191930 [Graal] emits unparseable XML into compile log
P5 JDK-8227632 Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4
P5 JDK-8225783 Incorrect use of binary operators on booleans in type.cpp
P5 JDK-8219214 Infinite Loop in CodeSection::dump()
P5 JDK-8156207 Resource allocated BitMaps are often cleared unnecessarily

hotspot/gc

Priority Bug Summary
P2 JDK-8237396 JvmtiTagMap::weak_oops_do() should not trigger barriers
P3 JDK-8231779 crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
P4 JDK-8204834 Fix confusing "allocate" naming in OopStorage
P4 JDK-8231671 Fix copyright headers in hotspot (missing comma after year)

hotspot/jfr

Priority Bug Summary
P3 JDK-8241344 applications/microbenchmarks are encountering crashes in tier5
P3 JDK-8219904 ClassCastException when calling FlightRecorderMXBean#getRecordings()
P3 JDK-8233197 Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
P4 JDK-8244777 ClassLoaderStats VM Op uses constant hash value

hotspot/jvmti

Priority Bug Summary
P4 JDK-8225325 Add tests for redefining a class' private method during resolution of the bootstrap specifier
P4 JDK-8051349 nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly

hotspot/runtime

Priority Bug Summary
P2 JDK-8225789 Empty method parameter type should generate ClassFormatError
P2 JDK-8228407 JVM crashes with shared archive file mismatch
P2 JDK-8233608 Minimal build broken after JDK-8233494
P2 JDK-8233137 runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
P3 JDK-8234270 [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
P3 JDK-8239787 AArch64: String.indexOf may incorrectly handle empty strings.
P3 JDK-8240197 Cannot start JVM when $JAVA_HOME includes CJK characters
P3 JDK-8213250 CDS archive creation aborts due to metaspace object allocation failure
P3 JDK-8240529 CheckUnhandledOops breaks NULL check in Modules::define_module
P3 JDK-8240824 enhance print_full_memory_info on Linux by THP related information
P3 JDK-8139876 Exclude hanging nsk/stress/stack from execution with deoptimization enabled
P3 JDK-8224847 gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
P3 JDK-8238676 jni crashes on accessing it from process exit hook
P3 JDK-8234691 Potential double-free in ParallelSPCleanupTask constructor
P3 JDK-8212933 Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
P3 JDK-8241343 VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
P3 JDK-8210303 VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
P3 JDK-8240603 Windows 32bit compile error after 8238676
P4 JDK-8241464 [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
P4 JDK-8241660 Add virtualization information output to hs_err file on macOS
P4 JDK-8233494 Avoid calling MallocTracker::record_malloc and record_free when NMT is off
P4 JDK-8241586 compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
P4 JDK-8241948 enhance list of environment variables printed in hs_err file
P4 JDK-8242626 enhance posix print_rlimit_info
P4 JDK-8228482 fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
P4 JDK-8239000 handle ContendedPaddingWidth in vm_version_ppc
P4 JDK-8235908 omit ThreadPriorityPolicy warning when value is set from image
P4 JDK-8224793 os::die() does not honor CreateCoredumpOnCrash option
P4 JDK-8234779 Provide idiom for declaring classes noncopyable
P4 JDK-8239915 Zero VM crashes when handling dynamic constant

hotspot/svc-agent

Priority Bug Summary
P4 JDK-8239462 jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
P4 JDK-8239224 libproc_impl.c previous_thr may be used uninitialized warning

hotspot/test

Priority Bug Summary
P2 JDK-8215369 JCStress pollute /var/tmp with temporary files.

infrastructure

Priority Bug Summary
P4 JDK-8239792 Bump update version for OpenJDK: jdk-11.0.8

infrastructure/build

Priority Bug Summary
P2 JDK-8235686 Add more custom hooks in Bundles.gmk
P2 JDK-8232134 Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
P2 JDK-8244951 Missing entitlements for hardened runtime
P3 JDK-8243059 Build fails when --with-vendor-name contains a comma
P3 JDK-8232748 Build static versions of certain JDK libraries
P3 JDK-8237192 Generate stripped/public pdbs on Windows for jdk images
P3 JDK-8241996 on linux set full relro in the linker flags
P3 JDK-8233880 Support compilers with multi-digit major version numbers
P3 JDK-8231572 Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
P4 JDK-8217404 --with-jvm-features doesn't work when multiple features are explicitly disabled
P4 JDK-8236921 Add build target to produce a JDK image suitable for a Graal/SVM build
P4 JDK-8232572 Add hooks for custom output dir in Bundles.gmk
P4 JDK-8218807 Compilation database (compile_commands.json) may contain obsolete items
P4 JDK-8240073 Fix 'test-make' build target in 11u
P4 JDK-8240972 macOS codesign fail on macOS 10.13.5 or older
P4 JDK-8212986 Make Visual Studio compiler check less strict

security-libs/java.security

Priority Bug Summary
P2 JDK-8248505 Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
P3 JDK-8246613 Choose the default SecureRandom algo based on registration ordering
P3 JDK-8236470 Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
P3 JDK-8238452 Keytool generates wrong expiration date if validity is set to 2050/01/01
P3 JDK-8225069 Remove Comodo root certificate that is expiring in May 2020
P3 JDK-8225068 Remove DocuSign root certificate that is expiring in May 2020
P4 JDK-8237962 give better error output for invalid OCSP response intervals in CertPathValidator checks
P4 JDK-8235183 Remove the "HACK CODE" in comment

security-libs/javax.crypto:pkcs11

Priority Bug Summary
P2 JDK-8238898 Missing hash characters for header on license file
P3 JDK-8239457 call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
P4 JDK-8238555 Allow initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
P4 JDK-8236897 Fix the copyright header for pkcs11gcm2.h
P4 JDK-8241432 GCMEmptyIv.java test fails on Solaris 11.4

security-libs/javax.net.ssl

Priority Bug Summary
P2 JDK-8237474 Default SSLEngine should create in server role
P2 JDK-8209333 Socket reset issue for TLS 1.3 socket close
P2 JDK-8239798 SSLSocket closes socket both socket endpoints on a SocketTimeoutException
P3 JDK-8224997 ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
P3 JDK-8228757 Fail fast if the handshake type is unknown
P3 JDK-8241054 half-closed SSLEngine status may cause application dead loop
P3 JDK-8242294 JSSE Client does not throw SSLException when an alert occurs during handshaking
P3 JDK-8233621 Mismatch in jsse.enableMFLNExtension property name
P3 JDK-8215711 Missing key_share extension for (EC)DHE key exchange should alert missing_extension
P3 JDK-8219991 New fix of the deadlock in sun.security.ssl.SSLSocketImpl
P3 JDK-8242141 New System Properties to configure the TLS signature schemes
P3 JDK-8235263 Revert TLS 1.3 change that wrapped IOExceptions
P3 JDK-8246031 SSLSocket.getSession() doesn't close connection for timeout/ interrupts
P3 JDK-8205653 test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
P3 JDK-8235874 The ordering of Cipher Suites is not maintained provided through “jdk.tls.client.cipherSuites” and “jdk.tls.server.cipherSuites” system property.
P4 JDK-8240827 Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
P4 JDK-8211339 NPE during SSL handshake caused by HostnameChecker
P4 JDK-8234728 Some security tests should support TLSv1.3
P4 JDK-8234727 sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
P4 JDK-8235311 Tag mismatch may alert bad_record_mac

security-libs/javax.xml.crypto

Priority Bug Summary
P4 JDK-8232357 Compare version info of Santuario to legal notice

security-libs/jdk.security

Priority Bug Summary
P4 JDK-8241888 Mirror jdk.security.allowNonCaAnchor system property with a security one

tools/javac

Priority Bug Summary
P2 JDK-8214571 -Xdoclint of array serialField gives "error: array type not allowed here"

tools/javadoc(tool)

Priority Bug Summary
P3 JDK-8214856 Errors with JSZip in web console after upgrade to 3.1.5
P3 JDK-8236700 Upgrading JSZip to 3.2.2 from 3.1.5

tools/jlink

Priority Bug Summary
P3 JDK-8232080 jlink plugins for vendor information and command-line options
P3 JDK-8234696 tools/jlink/plugins/VendorInfoPluginsTest.java times out

tools/jshell

Priority Bug Summary
P2 JDK-8200701 jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
P4 JDK-8212167 JShell : Stack trace of exception has wrong line number
P4 JDK-8080353 JShell: Better error message on attempting to add default method
P5 JDK-8159740 JShell: corralled declarations do not have correct source to wrapper mapping

tools/launcher

Priority Bug Summary
P2 JDK-8231863 Crash if classpath is read from @argument file and the main gets option argument
P3 JDK-8240629 argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
P4 JDK-8241445 Fix copyrights after JDK-8240629 change
P4 JDK-8241638 launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set

xml/jaxp

Priority Bug Summary
P4 JDK-8242470 Update Xerces2 Java to Version 2.12.1