RELEASE NOTES FOR: 11.0.8 ==================================================================================================== Notes generated: Wed Oct 02 06:54:10 CEST 2024 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/javax.net.ssl: JDK-8237474: Default SSLEngine Should Create in Server Role In JDK 11 and later, `javax.net.ssl.SSLEngine` by default used client mode when handshaking. As a result, the set of default enabled protocols may differ to what is expected. `SSLEngine` would usually be used in server mode. From this JDK release onwards, `SSLEngine` will default to server mode. The `javax.net.ssl.SSLEngine.setUseClientMode​(boolean mode)` method may be used to configure the mode. JDK-8242141: New System Properties to Configure the TLS Signature Schemes Two new system properties have been added to customize the TLS signature schemes in JDK. `jdk.tls.client.SignatureSchemes` has been added for the TLS client side, and `jdk.tls.server.SignatureSchemes` has been added for the server side. Each system property contains a comma-separated list of supported signature scheme names specifying the signature schemes that could be used for the TLS connections. The names are described in the "Signature Schemes" section of the *Java Security Standard Algorithm Names Specification*. security-libs/javax.crypto:pkcs11: JDK-8238555: SunPKCS11 Initialization With NSS When External FIPS Modules Are in Security Modules Database The SunPKCS11 security provider can now be initialized with NSS when FIPS-enabled external modules are configured in the Security Modules Database (NSSDB). Before this change, when such a library was configured for NSS in non-FIPS mode, the SunPKCS11 provider would throw a RuntimeException with the message "FIPS flag set for non-internal module". This change allows the JDK to work properly with recent NSS releases in GNU/Linux operating systems when the system-wide FIPS policy is turned on. client-libs/java.awt: JDK-8211301: Deprecated NSWindowStyleMaskTexturedBackground After an upgrade of the macOS SDK used to build the JDK, the behavior of the `apple.awt.brushMetalLook` and `textured` Swing properties has changed. When these properties are set, the title of the frame is still visible. It is recommended that the `apple.awt.transparentTitleBar` property be set to `true` to make the title of the frame invisible again. The `apple.awt.fullWindowContent` property can also be used. Please note that `Textured window` support was implemented by using the `NSTexturedBackgroundWindowMask` value of `NSWindowStyleMask`. However, this was deprecated in macOS 10.12 along with `NSWindowStyleMaskTexturedBackground`, which was deprecated in macOS 10.14. For additional information, refer to the following documentation: - `apple.awt.brushMetalLook`: https://developer.apple.com/documentation/appkit/nstexturedbackgroundwindowmask?language=objc - `apple.awt.transparentTitleBar`: https://developer.apple.com/documentation/appkit/nswindow/1419167-titlebarappearstransparent?language=objc - `apple.awt.fullWindowContent`: https://developer.apple.com/documentation/appkit/nsfullsizecontentviewwindowmask security-libs/java.security: JDK-8225069: Removal of Comodo Root CA Certificate The following expired Comodo root CA certificate has been removed from the `cacerts` keystore: ``` + alias name "addtrustclass1ca [jdk]" Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE ``` JDK-8225068: Removal of DocuSign Root CA Certificate The following expired DocuSign root CA certificate has been removed from the `cacerts` keystore: ``` + alias name "keynectisrootca [jdk]" Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR ``` ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs: (P3) JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics() client-libs/2d: (P3) JDK-8221741: ClassCastException can happen when fontconfig.properties is used (P3) JDK-8214481: freetype path does not disable TrueType hinting with AA+FM hints (P3) JDK-8238942: Rendering artifacts with LCD text and fractional metrics (P3) JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with GetDeviceCaps (P3) JDK-8224109: Text spaced incorrectly by drawString under rotation with fractional metrics (P3) JDK-8209113: Use WeakReference for lastFontStrike for created Fonts (P4) JDK-6933331: (d3d/ogl) java.lang.IllegalStateException: Buffers have not been created (P4) JDK-8232226: [macos 10.15] test/jdk/java/awt/color/EqualityTest/EqualityTest.java may fail (P4) JDK-8175984: ICC_Profile has un-needed, not-empty finalize method (P4) JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing (P4) JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails on windows10 (P4) JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code. (P4) JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails client-libs/java.awt: (P2) JDK-8234522: [macos] Crash with use of native file dialog (P2) JDK-8242174: [macos] The NestedModelessDialogTest test make the macOS unstable (P2) JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash (P3) JDK-8231438: [macOS] Dark mode for the desktop is not supported (P3) JDK-8211301: [macos] support full window content options (P3) JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559 (P3) JDK-8238575: DragSourceEvent.getLocation() returns wrong value on HiDPI screens (Windows) (P3) JDK-8176359: Frame#setMaximizedbounds not working properly in multi screen environments (P3) JDK-8221823: Requested JDialog width is ignored (P3) JDK-8231564: setMaximizedBounds is broken with large display scale and multiple monitors (P3) JDK-8225126: Test SetBoundsPaintTest.html failed on Windows when desktop is scaled (P4) JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread (P4) JDK-8039082: [TEST_BUG] Test java/awt/dnd/BadSerializationTest/BadSerializationTest.java fails (P4) JDK-8236545: Compilation error in mach5 java/awt/FileDialog/MacOSGoToFolderCrash.java (P4) JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print (P4) JDK-8198000: java/awt/List/EmptyListEventTest/EmptyListEventTest.java debug assert on Windows (P4) JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/WrongParentAfterRemoveMenu.java debug assert on Windows (P4) JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on Windows (P4) JDK-8235739: Rare NPE at WComponentPeer.getGraphics() (P4) JDK-8233707: systemScale.cpp could not compile with VS2019 (P4) JDK-8223108: Test java/awt/EventQueue/NonComponentSourcePost.java is unstable (P4) JDK-8234137: The "AutoTestOnTop.java" test may run external applications (P4) JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration) may throw ClassCastException (P4) JDK-8239819: XToolkit: Misread of screen information memory client-libs/javax.accessibility: (P3) JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden (P4) JDK-8240512: backport of 8213516: jck test api/javax_accessibility/AccessibleState/fields.html fails intermittent client-libs/javax.imageio: (P3) JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable client-libs/javax.sound: (P4) JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to report a gone audio device (P4) JDK-8221445: FastSysexMessage constructor crashes MIDI receiption thread client-libs/javax.swing: (P2) JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS (P3) JDK-8040630: Popup menus and tooltips flicker with previous popup contents when first shown (P4) JDK-8240792: [accessibility] Can edit text cell correctly, but Accessibility Tool reads nothing about editor (P4) JDK-8240202: A few client tests leave mouse buttons pressed (P4) JDK-7124307: JSpinner and changing value by mouse (P4) JDK-8198339: Test javax/swing/border/Test6981576.java is unstable core-libs: (P4) JDK-8243539: Copyright info (Year) should be updated for fix of 8241638 core-libs/java.lang: (P3) JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails with -XX:+DeoptimizeALot (P3) JDK-8239893: Windows handle Leak when starting processes using ProcessBuilder (P4) JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u (P4) JDK-8210788: Javadoc for Thread.join(long, int) should specify that it waits forever when both arguments are zero (P4) JDK-8239365: ProcessBuilder test modifications for AIX execution (P4) JDK-8232846: ProcessHandle.Info command with non-English shows question marks core-libs/java.lang.invoke: (P3) JDK-8233920: MethodHandles::tryFinally generates illegal bytecode for long/double return types core-libs/java.net: (P3) JDK-8210147: adjust some WSAGetLastError usages in windows network coding (P3) JDK-8203672: JNI exception pending in PlainSocketImpl.c (P3) JDK-8183369: RFC unconformity of HttpURLConnection with proxy (P3) JDK-8244853: The static build of libextnet is missing the JNI_OnLoad_extnet function (P4) JDK-8191169: java/net/Authenticator/B4769350.java failed intermittently (P4) JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE (P4) JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is flawed core-libs/java.nio: (P4) JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) (P4) JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX failure with IOE "Operation not permitted" core-libs/java.nio.charsets: (P3) JDK-8235834: IBM-943 charset encoder needs updating (P3) JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open, x-IBM834 and x-IBM949C) (P4) JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error: Cp943 - can't read properly" core-libs/java.text: (P4) JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo core-libs/java.time: (P3) JDK-8243541: (tz) Upgrade Timezone Data to tzdata2020a core-libs/java.util.jar: (P3) JDK-8239351: Give more meaningful InternalError messages in Deflater.c core-libs/java.util:collections: (P4) JDK-8205399: Set node color on pinned HashMap.TreeNode deletion core-libs/javax.naming: (P2) JDK-8217606: LdapContext#reconnect always opens a new connection (P3) JDK-8214440: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '' does not match the hostname in the server's certificate" core-svc/debugger: (P3) JDK-8193879: Java debugger hangs on method invocation (P4) JDK-8239055: Wrong implementation of VMState.hasListener core-svc/java.lang.instrument: (P4) JDK-8234968: check calloc rv in libinstrument InvocationAdapter core-svc/javax.management: (P3) JDK-8242239: [Graal] javax/management/generified/GenericTest.java fails: FAILED: queryMBeans sets same (P4) JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value core-svc/tools: (P4) JDK-8240711: TestJstatdPort.java failed due to "ExportException: Port already in use:" hotspot/compiler: (P2) JDK-8210284: "assert((av & 0x00000001) == 0) failed: unsupported V8" on Solaris 11.4 (P2) JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to unordered Load (acquire semantics missing) (P2) JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3 instructions on processors which don't support it (P2) JDK-8231118: ARM32: Math tests failures (P2) JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types() (P2) JDK-8233033: C2 produces wrong result while unswitching a loop due to lost control dependencies (P2) JDK-8235984: C2: assert(out->in(PhiNode::Region) == head || out->in(PhiNode::Region) == slow_head) failed: phi must be either part of the slow or the fast loop (P2) JDK-8237859: C2: Crash when loads float above range check (P2) JDK-8231550: C2: ShouldNotReachHere() in verify_strip_mined_scheduling (P2) JDK-8216541: CompiledICHolders of VM locked unloaded nmethods are released too late (P2) JDK-8211392: compiler/profiling/spectrapredefineclass_classloaders/Launcher.java times out in JDK12 CI (P2) JDK-8224931: disable JAOTC invokedynamic support until 8223533 is fixed (P2) JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges (P2) JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in (P2) JDK-8240227: Loop predicates should be copied to unswitched loops (P2) JDK-8241900: Loop unswitching may cause dependence on null check to be lost (P2) JDK-8241556: Memory leak if -XX:CompileCommand is set (P2) JDK-8235452: Strip mined loop verification fails with assert(is_OuterStripMinedLoop()) failed: invalid node class (P3) JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when JVMTI walks AOT frames (P3) JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is skipped in all testing (P3) JDK-8216151: [Graal] Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.debug (P3) JDK-8237086: assert(is_MachReturn()) running CTW with fix for JDK-8231291 (P3) JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed: multiple Memories being matched at once? (P3) JDK-8214862: assert(proj != __null) at compile.cpp:3251 (P3) JDK-8229855: C2 fails with assert(false) failed: bad AD file (P3) JDK-8209439: C2 library_call can potentially ignore Math.pow intrinsic or use null pointer (P3) JDK-8239142: C2's UseUniqueSubclasses optimization is broken for array accesses (P3) JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize) doesn't work with 1GB LargePages (P3) JDK-8211332: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs (P3) JDK-8238356: CodeHeap::blob_count() overestimates the number of blobs (P3) JDK-8239852: java/util/concurrent tests fail with -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed (P3) JDK-8235762: JVM crash in SWPointer during C2 compilation (P3) JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI -XX:JVMCICounterSize=2147483648 (P3) JDK-8242108: Performance regression after fix for JDK-8229496 (P3) JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle precedence edges from unmatched CFG nodes correctly (P3) JDK-8225653: Provide more information when hitting SIGILL from HaltNode (P3) JDK-8245649: Revert 8245397 backport of 8230591 (P3) JDK-8236759: ShouldNotReachHere in PhaseIdealLoop::verify_strip_mined_scheduling (P3) JDK-8231720: Some perf regressions after 8225653 (P3) JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with -XX:+StressGCM (P3) JDK-8215555: TieredCompilation C2 threads can excessively block handshakes (P3) JDK-8226198: use of & instead of && in LibraryCallKit::arraycopy_restore_alloc_state (P3) JDK-8235584: UseProfiledLoopPredicate fails with assert(_phase->get_loop(c) == loop) failed: have to be in the same loop (P4) JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT (P4) JDK-8225622: [AOT] runtime/SharedArchiveFile/TestInterpreterMethodEntries.java crashed with AOTed java.base (P4) JDK-8241458: [JVMCI] add mark value to expose CodeOffsets::Frame_Complete (P4) JDK-8238190: [JVMCI] Fix single implementor speculation for diamond shapes. (P4) JDK-8239456: [win][x86] vtable stub generation: assert failure (code size estimate) (P4) JDK-8239931: [win][x86] vtable stub generation: assert failure (code size estimate) follow-up (P4) JDK-8230591: AArch64: Missing intrinsics for Math.ceil, floor, rint (P4) JDK-8213947: ARM32: failed check_simd should set UsePopCountInstruction to false (P4) JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN || !((n)->is_dead()))) failed: can not use dead node (P4) JDK-8216154: C4819 warnings at HotSpot sources on Windows (P4) JDK-8234146: compiler/jsr292/ContinuousCallSiteTargetChange.java times out on SPARC (P4) JDK-8237951: CTW: C2 compilation fails with "malformed control flow" (P4) JDK-8217447: Develop flag TraceICs is broken (P4) JDK-8233364: Fix undefined behavior in Canonicalizer::do_ShiftOp (P4) JDK-8240220: IdealLoopTree::dump_head predicate printing is broken (P4) JDK-8221482: Initialize VMRegImpl::regName[] earlier to prevent assert during PrintStubCode (P4) JDK-8229158: make UseSwitchProfiling non-experimental or false by-default (P4) JDK-8226879: Memory leak in Type::hashcons (P4) JDK-8215551: Missing case label in nmethod::reloc_string_for() (P4) JDK-8022574: remove HaltNode code after uncommon trap calls (P4) JDK-8240223: Use consistent predicate order in and with PhaseIdealLoop::find_predicate (P4) JDK-8214444: Wrong strncat limits in dfa.cpp (P5) JDK-8191930: [Graal] emits unparseable XML into compile log (P5) JDK-8227632: Incorrect PrintCompilation message: made not compilable on levels 0 1 2 3 4 (P5) JDK-8225783: Incorrect use of binary operators on booleans in type.cpp (P5) JDK-8219214: Infinite Loop in CodeSection::dump() (P5) JDK-8156207: Resource allocated BitMaps are often cleared unnecessarily hotspot/gc: (P2) JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger barriers (P3) JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate (P4) JDK-8204834: Fix confusing "allocate" naming in OopStorage (P4) JDK-8231671: Fix copyright headers in hotspot (missing comma after year) hotspot/jfr: (P3) JDK-8241344: applications/microbenchmarks are encountering crashes in tier5 (P3) JDK-8219904: ClassCastException when calling FlightRecorderMXBean#getRecordings() (P3) JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing (P4) JDK-8244777: ClassLoaderStats VM Op uses constant hash value hotspot/jvmti: (P4) JDK-8225325: Add tests for redefining a class' private method during resolution of the bootstrap specifier (P4) JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails in nightly hotspot/runtime: (P2) JDK-8225789: Empty method parameter type should generate ClassFormatError (P2) JDK-8228407: JVM crashes with shared archive file mismatch (P2) JDK-8233608: Minimal build broken after JDK-8233494 (P2) JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java fails after 8232080 (P3) JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area (P3) JDK-8239787: AArch64: String.indexOf may incorrectly handle empty strings. (P3) JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters (P3) JDK-8213250: CDS archive creation aborts due to metaspace object allocation failure (P3) JDK-8240529: CheckUnhandledOops breaks NULL check in Modules::define_module (P3) JDK-8240824: enhance print_full_memory_info on Linux by THP related information (P3) JDK-8139876: Exclude hanging nsk/stress/stack from execution with deoptimization enabled (P3) JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java fails with reserved greater than expected (P3) JDK-8238676: jni crashes on accessing it from process exit hook (P3) JDK-8234691: Potential double-free in ParallelSPCleanupTask constructor (P3) JDK-8212933: Thread-SMR: requesting a VM operation whilst holding a ThreadsListHandle can cause deadlocks (P3) JDK-8241343: VM times out in VM_HandshakeAllThreads::doit() with RunThese30M (P3) JDK-8210303: VM_HandshakeAllThreads fails assert with "failed: blocked and not walkable" (P3) JDK-8240603: Windows 32bit compile error after 8238676 (P4) JDK-8241464: [11u] Backport: make rehashing be a needed guaranteed safepoint cleanup action (P4) JDK-8241660: Add virtualization information output to hs_err file on macOS (P4) JDK-8233494: Avoid calling MallocTracker::record_malloc and record_free when NMT is off (P4) JDK-8241586: compiler/cpuflags/TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64 (P4) JDK-8241948: enhance list of environment variables printed in hs_err file (P4) JDK-8242626: enhance posix print_rlimit_info (P4) JDK-8228482: fix xlc16/xlclang comparison of distinct pointer types and string literal conversion warnings (P4) JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc (P4) JDK-8235908: omit ThreadPriorityPolicy warning when value is set from image (P4) JDK-8224793: os::die() does not honor CreateCoredumpOnCrash option (P4) JDK-8234779: Provide idiom for declaring classes noncopyable (P4) JDK-8239915: Zero VM crashes when handling dynamic constant hotspot/svc-agent: (P4) JDK-8239462: jdk.hotspot.agent misses some ReleaseStringUTFChars calls in case of early returns (P4) JDK-8239224: libproc_impl.c previous_thr may be used uninitialized warning hotspot/test: (P2) JDK-8215369: JCStress pollute /var/tmp with temporary files. infrastructure: (P4) JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8 infrastructure/build: (P2) JDK-8235686: Add more custom hooks in Bundles.gmk (P2) JDK-8232134: Change to Visual Studio 2017 15.9.16 for building on Windows at Oracle (P2) JDK-8244951: Missing entitlements for hardened runtime (P3) JDK-8243059: Build fails when --with-vendor-name contains a comma (P3) JDK-8232748: Build static versions of certain JDK libraries (P3) JDK-8237192: Generate stripped/public pdbs on Windows for jdk images (P3) JDK-8241996: on linux set full relro in the linker flags (P3) JDK-8233880: Support compilers with multi-digit major version numbers (P3) JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in libosxsecurity (P4) JDK-8217404: --with-jvm-features doesn't work when multiple features are explicitly disabled (P4) JDK-8236921: Add build target to produce a JDK image suitable for a Graal/SVM build (P4) JDK-8232572: Add hooks for custom output dir in Bundles.gmk (P4) JDK-8218807: Compilation database (compile_commands.json) may contain obsolete items (P4) JDK-8240073: Fix 'test-make' build target in 11u (P4) JDK-8240972: macOS codesign fail on macOS 10.13.5 or older (P4) JDK-8212986: Make Visual Studio compiler check less strict security-libs/java.security: (P2) JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider (P3) JDK-8246613: Choose the default SecureRandom algo based on registration ordering (P3) JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId (P3) JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01 (P3) JDK-8225069: Remove Comodo root certificate that is expiring in May 2020 (P3) JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020 (P4) JDK-8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks (P4) JDK-8235183: Remove the "HACK CODE" in comment security-libs/javax.crypto:pkcs11: (P2) JDK-8238898: Missing hash characters for header on license file (P3) JDK-8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect (P4) JDK-8238555: Allow initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB (P4) JDK-8236897: Fix the copyright header for pkcs11gcm2.h (P4) JDK-8241432: GCMEmptyIv.java test fails on Solaris 11.4 security-libs/javax.net.ssl: (P2) JDK-8237474: Default SSLEngine should create in server role (P2) JDK-8209333: Socket reset issue for TLS 1.3 socket close (P2) JDK-8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException (P3) JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption throws ShortBufferException (P3) JDK-8228757: Fail fast if the handshake type is unknown (P3) JDK-8241054: half-closed SSLEngine status may cause application dead loop (P3) JDK-8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking (P3) JDK-8233621: Mismatch in jsse.enableMFLNExtension property name (P3) JDK-8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension (P3) JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl (P3) JDK-8242141: New System Properties to configure the TLS signature schemes (P3) JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions (P3) JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts (P3) JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure (P3) JDK-8235874: The ordering of Cipher Suites is not maintained provided through “jdk.tls.client.cipherSuites” and “jdk.tls.server.cipherSuites” system property. (P4) JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE" (P4) JDK-8211339: NPE during SSL handshake caused by HostnameChecker (P4) JDK-8234728: Some security tests should support TLSv1.3 (P4) JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3 (P4) JDK-8235311: Tag mismatch may alert bad_record_mac security-libs/javax.xml.crypto: (P4) JDK-8232357: Compare version info of Santuario to legal notice security-libs/jdk.security: (P4) JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one tools/javac: (P2) JDK-8214571: -Xdoclint of array serialField gives "error: array type not allowed here" tools/javadoc(tool): (P3) JDK-8214856: Errors with JSZip in web console after upgrade to 3.1.5 (P3) JDK-8236700: Upgrading JSZip to 3.2.2 from 3.1.5 tools/jlink: (P3) JDK-8232080: jlink plugins for vendor information and command-line options (P3) JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java times out tools/jshell: (P2) JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows, after JDK-8198801 (P4) JDK-8212167: JShell : Stack trace of exception has wrong line number (P4) JDK-8080353: JShell: Better error message on attempting to add default method (P5) JDK-8159740: JShell: corralled declarations do not have correct source to wrapper mapping tools/launcher: (P2) JDK-8231863: Crash if classpath is read from @argument file and the main gets option argument (P3) JDK-8240629: argfiles parsing broken for argfiles with comment cross 4096 bytes chunk (P4) JDK-8241445: Fix copyrights after JDK-8240629 change (P4) JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set xml/jaxp: (P4) JDK-8242470: Update Xerces2 Java to Version 2.12.1