RELEASE NOTES FOR: 11.0.8
====================================================================================================

Notes generated: Tue Apr 02 09:11:13 CEST 2024

Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry.

JAVA ENHANCEMENT PROPOSALS (JEP):

  None.

RELEASE NOTES:

security-libs/javax.net.ssl:

    JDK-8237474: Default SSLEngine Should Create in Server Role

      In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client mode when handshaking.
      As a result, the set of default enabled protocols may differ to what is expected. `SSLEngine`
      would usually be used in server mode. From this JDK release onwards, `SSLEngine` will default
      to server mode. The `javax.net.ssl.SSLEngine.setUseClientMode​(boolean mode)` method may be
      used to configure the mode.

    JDK-8242141: New System Properties to Configure the TLS Signature Schemes

      Two new system properties have been added to customize the TLS signature schemes in JDK. 
      `jdk.tls.client.SignatureSchemes` has been added for the TLS client side, and
      `jdk.tls.server.SignatureSchemes` has been added for the server side.
      
      Each system property contains a comma-separated list of supported signature scheme names
      specifying the signature schemes that could be used for the TLS connections.
      
      The names are described in the "Signature Schemes" section of the *Java Security Standard
      Algorithm Names Specification*.

security-libs/javax.crypto:pkcs11:

    JDK-8238555: SunPKCS11 Initialization With NSS When External FIPS Modules Are in Security Modules Database

      The SunPKCS11 security provider can now be initialized with NSS when FIPS-enabled external
      modules are configured in the Security Modules Database (NSSDB). Before this change, when such
      a library was configured for NSS in non-FIPS mode, the SunPKCS11 provider would throw a
      RuntimeException with the message "FIPS flag set for non-internal module".
      
      This change allows the JDK to work properly with recent NSS releases in GNU/Linux operating
      systems when the system-wide FIPS policy is turned on.

client-libs/java.awt:

    JDK-8211301: Deprecated NSWindowStyleMaskTexturedBackground

      After an upgrade of the macOS SDK used to build the JDK, the behavior of the
      `apple.awt.brushMetalLook` and `textured` Swing properties has changed. When these properties
      are set, the title of the frame is still visible. It is recommended that the
      `apple.awt.transparentTitleBar` property be set to `true` to make the title of the frame
      invisible again. The `apple.awt.fullWindowContent` property can also be used.
      
      Please note that `Textured window` support was implemented by using the
      `NSTexturedBackgroundWindowMask` value of `NSWindowStyleMask`. However, this was deprecated in
      macOS 10.12 along with `NSWindowStyleMaskTexturedBackground`, which was deprecated in macOS
      10.14. 
      
      For additional information, refer to the following documentation:  -
      `apple.awt.brushMetalLook`: 
      https://developer.apple.com/documentation/appkit/nstexturedbackgroundwindowmask?language=objc 
      - `apple.awt.transparentTitleBar`:
      https://developer.apple.com/documentation/appkit/nswindow/1419167-titlebarappearstransparent?language=objc
      - `apple.awt.fullWindowContent`:
      https://developer.apple.com/documentation/appkit/nsfullsizecontentviewwindowmask 

security-libs/java.security:

    JDK-8225069: Removal of Comodo Root CA Certificate

      The following expired Comodo root CA certificate has been removed from the `cacerts` keystore:
      ```  + alias name "addtrustclass1ca [jdk]"
      
      Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
      ``` 

    JDK-8225068: Removal of DocuSign Root CA Certificate

      The following expired DocuSign root CA certificate has been removed from the `cacerts`
      keystore: ```  + alias name "keynectisrootca [jdk]"
      
      Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR ``` 


ALL FIXED ISSUES, BY COMPONENT AND PRIORITY:

client-libs:
  (P3) JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()

client-libs/2d:
  (P3) JDK-8221741: ClassCastException can happen when fontconfig.properties is used
  (P3) JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints
  (P3) JDK-8238942: Rendering artifacts with LCD text and fractional metrics
  (P3) JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps
  (P3) JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metrics
  (P3) JDK-8209113: Use WeakReference for lastFontStrike for created Fonts
  (P4) JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created
  (P4) JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail
  (P4) JDK-8175984: ICC_Profile has un-needed, not-empty finalize method
  (P4) JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing
  (P4) JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10
  (P4) JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code.
  (P4) JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails

client-libs/java.awt:
  (P2) JDK-8234522: [macos] Crash with use of native file dialog
  (P2) JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable
  (P2) JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash
  (P3) JDK-8231438: [macOS]  Dark mode for the desktop is not supported
  (P3) JDK-8211301: [macos] support full window content options
  (P3) JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
  (P3) JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows)
  (P3) JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments
  (P3) JDK-8221823: Requested JDialog width is ignored
  (P3) JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors
  (P3) JDK-8225126: Test SetBoundsPaintTest.html failed on Windows when desktop is scaled
  (P4) JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread
  (P4) JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails
  (P4) JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java
  (P4) JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print
  (P4) JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows
  (P4) JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows
  (P4) JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows
  (P4) JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
  (P4) JDK-8233707: systemScale.cpp could not compile with VS2019
  (P4) JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable
  (P4) JDK-8234137: The "AutoTestOnTop.java" test may run external applications
  (P4) JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException
  (P4) JDK-8239819: XToolkit: Misread of screen information memory

client-libs/javax.accessibility:
  (P3) JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden
  (P4) JDK-8240512: backport of 8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent

client-libs/javax.imageio:
  (P3) JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable

client-libs/javax.sound:
  (P4) JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device
  (P4) JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread

client-libs/javax.swing:
  (P2) JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
  (P3) JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown
  (P4) JDK-8240792: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor
  (P4) JDK-8240202: A few client tests leave mouse buttons pressed
  (P4) JDK-7124307: JSpinner and changing value by mouse
  (P4) JDK-8198339: Test javax/swing/border/Test6981576.java is unstable

core-libs:
  (P4) JDK-8243539: Copyright info (Year) should be updated for fix of 8241638

core-libs/java.lang:
  (P3) JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot
  (P3) JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder
  (P4) JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
  (P4) JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero
  (P4) JDK-8239365: ProcessBuilder test modifications for AIX execution
  (P4) JDK-8232846: ProcessHandle.Info command with non-English shows question marks

core-libs/java.lang.invoke:
  (P3) JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return types

core-libs/java.net:
  (P3) JDK-8210147: adjust some WSAGetLastError usages in windows network coding
  (P3) JDK-8203672: JNI exception pending in PlainSocketImpl.c 
  (P3) JDK-8183369: RFC unconformity of HttpURLConnection with proxy
  (P3) JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function
  (P4) JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently 
  (P4) JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE
  (P4) JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed

core-libs/java.nio:
  (P4) JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9)
  (P4) JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted"

core-libs/java.nio.charsets:
  (P3) JDK-8235834: IBM-943 charset encoder needs updating
  (P3) JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C)
  (P4) JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error: Cp943 - can't read properly"

core-libs/java.text:
  (P4) JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo

core-libs/java.time:
  (P3) JDK-8243541: (tz) Upgrade Timezone Data to tzdata2020a

core-libs/java.util.jar:
  (P3) JDK-8239351: Give more meaningful InternalError messages in Deflater.c

core-libs/java.util:collections:
  (P4) JDK-8205399: Set node color on pinned HashMap.TreeNode deletion

core-libs/javax.naming:
  (P2) JDK-8217606: LdapContext#reconnect always opens a new connection
  (P3) JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate"

core-svc/debugger:
  (P3) JDK-8193879: Java debugger hangs on method invocation
  (P4) JDK-8239055: Wrong implementation of VMState.hasListener

core-svc/java.lang.instrument:
  (P4) JDK-8234968: check calloc rv in libinstrument InvocationAdapter

core-svc/javax.management:
  (P3) JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same
  (P4) JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value

core-svc/tools:
  (P4) JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:"

hotspot/compiler:
  (P2) JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4
  (P2) JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing)
  (P2) JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it
  (P2) JDK-8231118: ARM32: Math tests failures
  (P2) JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types() 
  (P2) JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies
  (P2) JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop
  (P2) JDK-8237859: C2: Crash when loads float above range check
  (P2) JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling
  (P2) JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late
  (P2) JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI
  (P2) JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed
  (P2) JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges
  (P2) JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in
  (P2) JDK-8240227: Loop predicates should be copied to unswitched loops
  (P2) JDK-8241900: Loop unswitching may cause dependence on null check to be lost
  (P2) JDK-8241556: Memory leak if -XX:CompileCommand is set
  (P2) JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class
  (P3) JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames 
  (P3) JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing
  (P3) JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug
  (P3) JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291
  (P3) JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once?
  (P3) JDK-8214862: assert(proj != __null) at compile.cpp:3251
  (P3) JDK-8229855: C2 fails with assert(false) failed: bad AD file
  (P3) JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer
  (P3) JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses
  (P3) JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages
  (P3) JDK-8211332: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
  (P3) JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs
  (P3) JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed
  (P3) JDK-8235762: JVM crash in SWPointer during C2 compilation
  (P3) JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648
  (P3) JDK-8242108: Performance regression after fix for JDK-8229496
  (P3) JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly
  (P3) JDK-8225653: Provide more information when hitting SIGILL from HaltNode
  (P3) JDK-8245649: Revert 8245397 backport of 8230591
  (P3) JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling
  (P3) JDK-8231720: Some perf regressions after 8225653
  (P3) JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM
  (P3) JDK-8215555: TieredCompilation C2 threads can excessively block handshakes
  (P3) JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state
  (P3) JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop
  (P4) JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
  (P4) JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base
  (P4) JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete
  (P4) JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes.
  (P4) JDK-8239456: [win][x86] vtable stub generation: assert failure (code size estimate)
  (P4) JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up
  (P4) JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint
  (P4) JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false
  (P4) JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node
  (P4) JDK-8216154: C4819 warnings at HotSpot sources on Windows
  (P4) JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC
  (P4) JDK-8237951: CTW: C2 compilation fails with "malformed control flow"
  (P4) JDK-8217447: Develop flag TraceICs is broken
  (P4) JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp
  (P4) JDK-8240220: IdealLoopTree::dump_head predicate printing is broken
  (P4) JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode
  (P4) JDK-8229158: make UseSwitchProfiling non-experimental or false by-default
  (P4) JDK-8226879: Memory leak in Type::hashcons
  (P4) JDK-8215551: Missing case label in nmethod::reloc_string_for()
  (P4) JDK-8022574: remove HaltNode code after uncommon trap calls
  (P4) JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate
  (P4) JDK-8214444: Wrong strncat limits in dfa.cpp
  (P5) JDK-8191930: [Graal] emits unparseable XML into compile log
  (P5) JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4  
  (P5) JDK-8225783: Incorrect use of binary operators on booleans in type.cpp
  (P5) JDK-8219214: Infinite Loop in CodeSection::dump()
  (P5) JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily

hotspot/gc:
  (P2) JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers
  (P3) JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate
  (P4) JDK-8204834: Fix confusing "allocate" naming in OopStorage
  (P4) JDK-8231671: Fix copyright headers in hotspot (missing comma after year)

hotspot/jfr:
  (P3) JDK-8241344: applications/microbenchmarks are encountering crashes in tier5
  (P3) JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings()
  (P3) JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing
  (P4) JDK-8244777: ClassLoaderStats VM Op uses constant hash value

hotspot/jvmti:
  (P4) JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier
  (P4) JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly

hotspot/runtime:
  (P2) JDK-8225789: Empty method parameter type should generate ClassFormatError
  (P2) JDK-8228407: JVM crashes with shared archive file mismatch
  (P2) JDK-8233608: Minimal build broken after JDK-8233494
  (P2) JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080
  (P3) JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area
  (P3) JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings.
  (P3) JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
  (P3) JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure 
  (P3) JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module
  (P3) JDK-8240824: enhance print_full_memory_info on Linux by THP related information
  (P3) JDK-8139876:  Exclude hanging nsk/stress/stack from execution with deoptimization enabled
  (P3) JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected
  (P3) JDK-8238676: jni crashes on accessing it from process exit hook
  (P3) JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor
  (P3) JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks
  (P3) JDK-8241343: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M
  (P3) JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable"
  (P3) JDK-8240603: Windows 32bit compile error after 8238676
  (P4) JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action
  (P4) JDK-8241660: Add virtualization information output to hs_err file on macOS
  (P4) JDK-8233494: Avoid calling MallocTracker::record_malloc and record_free when NMT is off
  (P4) JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
  (P4) JDK-8241948: enhance list of environment variables printed in hs_err file
  (P4) JDK-8242626: enhance posix print_rlimit_info
  (P4) JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings
  (P4) JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
  (P4) JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image
  (P4) JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option
  (P4) JDK-8234779: Provide idiom for declaring classes noncopyable
  (P4) JDK-8239915: Zero VM crashes when handling dynamic constant

hotspot/svc-agent:
  (P4) JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns
  (P4) JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning

hotspot/test:
  (P2) JDK-8215369: JCStress pollute /var/tmp with temporary files.

infrastructure:
  (P4) JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8

infrastructure/build:
  (P2) JDK-8235686: Add more custom hooks in Bundles.gmk
  (P2) JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle
  (P2) JDK-8244951: Missing entitlements for hardened runtime
  (P3) JDK-8243059: Build fails when --with-vendor-name contains a comma
  (P3) JDK-8232748: Build static versions of certain JDK libraries
  (P3) JDK-8237192: Generate stripped/public pdbs on Windows for jdk images
  (P3) JDK-8241996: on linux set full relro in the linker flags
  (P3) JDK-8233880: Support compilers with multi-digit major version numbers
  (P3) JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity
  (P4) JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled
  (P4) JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build
  (P4) JDK-8232572: Add hooks for custom output dir in Bundles.gmk
  (P4) JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items
  (P4) JDK-8240073: Fix 'test-make' build target in 11u
  (P4) JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
  (P4) JDK-8212986: Make Visual Studio compiler check less strict

security-libs/java.security:
  (P2) JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
  (P3) JDK-8246613: Choose the default SecureRandom algo based on registration ordering
  (P3) JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
  (P3) JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
  (P3) JDK-8225069: Remove Comodo root certificate that is expiring in May 2020
  (P3) JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020
  (P4) JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
  (P4) JDK-8235183: Remove the "HACK CODE" in comment

security-libs/javax.crypto:pkcs11:
  (P2) JDK-8238898: Missing hash characters for header on license file
  (P3) JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
  (P4) JDK-8238555: Allow initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
  (P4) JDK-8236897: Fix the copyright header for pkcs11gcm2.h
  (P4) JDK-8241432: GCMEmptyIv.java test fails on Solaris 11.4

security-libs/javax.net.ssl:
  (P2) JDK-8237474: Default SSLEngine should create in server role
  (P2) JDK-8209333: Socket reset issue for TLS 1.3 socket close 
  (P2) JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
  (P3) JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException
  (P3) JDK-8228757: Fail fast if the handshake type is unknown
  (P3) JDK-8241054: half-closed SSLEngine status may cause application dead loop
  (P3) JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
  (P3) JDK-8233621: Mismatch in jsse.enableMFLNExtension property name
  (P3) JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
  (P3) JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
  (P3) JDK-8242141: New System Properties to configure the TLS signature schemes
  (P3) JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
  (P3) JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
  (P3) JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure
  (P3) JDK-8235874: The ordering of Cipher Suites is not maintained provided through “jdk.tls.client.cipherSuites” and “jdk.tls.server.cipherSuites” system property.
  (P4) JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE"
  (P4) JDK-8211339: NPE during SSL handshake caused by HostnameChecker
  (P4) JDK-8234728: Some security tests should support TLSv1.3
  (P4) JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
  (P4) JDK-8235311: Tag mismatch may alert bad_record_mac

security-libs/javax.xml.crypto:
  (P4) JDK-8232357: Compare version info of Santuario to legal notice

security-libs/jdk.security:
  (P4) JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one

tools/javac:
  (P2) JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here"

tools/javadoc(tool):
  (P3) JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5
  (P3) JDK-8236700: Upgrading JSZip to 3.2.2 from 3.1.5

tools/jlink:
  (P3) JDK-8232080: jlink plugins for vendor information and command-line options
  (P3) JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out

tools/jshell:
  (P2) JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801
  (P4) JDK-8212167: JShell : Stack trace of exception has wrong line number
  (P4) JDK-8080353: JShell: Better error message on attempting to add default method
  (P5) JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping

tools/launcher:
  (P2) JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument
  (P3) JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk
  (P4) JDK-8241445: Fix copyrights after JDK-8240629 change
  (P4) JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set 

xml/jaxp:
  (P4) JDK-8242470: Update Xerces2 Java to Version 2.12.1