RELEASE NOTES FOR: 11.0.9
====================================================================================================

Notes generated: Tue Apr 02 09:31:50 CEST 2024

Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry.

JAVA ENHANCEMENT PROPOSALS (JEP):

  None.

RELEASE NOTES:

security-libs/javax.security:

    JDK-8239385: Support for canonicalize in krb5.conf

      The 'canonicalize' flag in the [krb5.conf file][1] is now supported by the JDK Kerberos
      implementation. When set to *true*, [RFC 6806][2] name canonicalization is requested by
      clients in TGT requests to KDC services (AS protocol). Otherwise, and by default, it is not
      requested.
      
      The new default behavior is different from JDK 14 and previous releases where name
      canonicalization was always requested by clients in TGT requests to KDC services (provided
      that support for [RFC 6806][2] was not explicitly disabled with the
      *sun.security.krb5.disableReferrals* system or security properties).
      
      [1]: https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html [2]:
      https://tools.ietf.org/html/rfc6806

core-libs/java.util:i18n:

    JDK-8236548: Localized Time Zone Name Inconsistency Between English and Other Locales

      English time zone names provided by the CLDR locale provider are now correctly synthesized
      following the CLDR spec, rather than substituted from the COMPAT provider. For example, SHORT
      style names are no longer synthesized abbreviations of LONG style names, but instead produce
      GMT offset formats.

core-libs/java.nio.charsets:

    JDK-8232161: Modified the MS950 charset Encoder's Conversion Table

      In this release, some of the one-way byte-to-char mappings have been aligned with the
      preferred mappings provided by the [Unicode
      Consortium](https://unicode.org/Public/MAPPINGS/VENDORS/MICSFT/WindowsBestFit/bestfit950.txt).

security-libs/java.security:

    JDK-8243320: Added 3 SSL Corporation Root CA Certificates

      The following root certificates have been added to the cacerts truststore: ``` + SSL
      Corporation   + sslrootrsaca     DN: CN=SSL.com Root Certification Authority RSA, O=SSL
      Corporation, L=Houston, ST=Texas, C=US
      
      + sslrootevrsaca     DN: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation,
      L=Houston, ST=Texas, C=US
      
      + sslrooteccca     DN: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation,
      L=Houston, ST=Texas, C=US ```

    JDK-8233228: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default

      Weak named curves are disabled by default by adding them to the following `disabledAlgorithms`
      security properties: `jdk.tls.disabledAlgorithms`,  `jdk.certpath.disabledAlgorithms`, and
      `jdk.jar.disabledAlgorithms`.  The named curves are listed below.
      
      With 47 weak named curves to be disabled, adding individual named curves to each
      `disabledAlgorithms` property would be overwhelming. To relieve this, a new security property,
      `jdk.disabled.namedCurves`, is implemented that can list the named curves common to all of the
      `disabledAlgorithms` properties. To use the new property in the `disabledAlgorithms`
      properties, precede the full property name with the keyword `include`.  Users can still add
      individual named curves to `disabledAlgorithms` properties separate from this new property. 
      No other properties can be included in the `disabledAlgorithms` properties.
      
      To restore the named curves, remove the `include jdk.disabled.namedCurves` either from
      specific or from all  `disabledAlgorithms` security properties. To restore one or more curves,
      remove the specific named curve(s) from the `jdk.disabled.namedCurves` property.
      
      Curves that are disabled through `jdk.disabled.namedCurves` include the following: secp112r1,
      secp112r2, secp128r1, secp128r2, secp160k1, secp160r1, secp160r2, secp192k1, secp192r1,
      secp224k1,  secp224r1, secp256k1, sect113r1, sect113r2, sect131r1, sect131r2, sect163k1,
      sect163r1, sect163r2, sect193r1, sect193r2, sect233k1, sect233r1, sect239k1, sect283k1,
      sect283r1, sect409k1, sect409r1, sect571k1, sect571r1, X9.62 c2tnb191v1, X9.62 c2tnb191v2,
      X9.62 c2tnb191v3, X9.62 c2tnb239v1, X9.62 c2tnb239v2, X9.62 c2tnb239v3, X9.62 c2tnb359v1,
      X9.62 c2tnb431r1, X9.62 prime192v2, X9.62 prime192v3,  X9.62 prime239v1, X9.62 prime239v2,
      X9.62 prime239v3, brainpoolP256r1, brainpoolP320r1, brainpoolP384r1, brainpoolP512r1
      
      Curves that remain enabled are:  secp256r1, secp384r1, secp521r1, X25519, X448 

    JDK-8243321: Added Entrust Root Certification Authority - G4 certificate

      The following root certificate has been added to the cacerts truststore: ``` + Entrust   +
      entrustrootcag4     DN: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,
      Inc. - for authorized use only",             OU=See www.entrust.net/legal-terms, O="Entrust,
      Inc.", C=US ```

    JDK-8172404: Tools Warn If Weak Algorithms Are Used

      The `keytool` and `jarsigner` tools have been updated to warn users when weak cryptographic
      algorithms are used in keys, certificates, and signed JARs before they are disabled. The weak
      algorithms are set in the `jdk.security.legacyAlgorithms` security property in the
      `java.security` configuration file. In this release, the tools issue warnings for the SHA-1
      hash algorithm and 1024-bit RSA/DSA keys.

core-svc/java.lang.management:

    JDK-8226575: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data

      When executing in a container, or other virtualized operating environment, the following
      `OperatingSystemMXBean` methods in this release return container specific information, if
      available. Otherwise, they return host specific data:
      
      - `getFreePhysicalMemorySize()` - `getTotalPhysicalMemorySize()` - `getFreeSwapSpaceSize()` -
      `getTotalSwapSpaceSize()` - `getSystemCpuLoad()`


ALL FIXED ISSUES, BY COMPONENT AND PRIORITY:

client-libs/2d:
  (P2) JDK-8244818: [macos] Java2D Queue Flusher crash while moving application window to external monitor
  (P3) JDK-8220150: [macos] macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
  (P4) JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/PDialogTest.java needs update by removing a infinite loop
  (P4) JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
  (P4) JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.

client-libs/java.awt:
  (P3) JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows)

client-libs/javax.accessibility:
  (P2) JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList

client-libs/javax.imageio:
  (P3) JDK-6532025: GIF reader throws misleading exception with truncated images
  (P4) JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java

client-libs/javax.swing:
  (P2) JDK-8249251: [dark_mode ubuntu 20.04]  The selected menu is not highlighted in GTKLookAndFeel
  (P3) JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called
  (P3) JDK-8204963: javax.swing.border.TitledBorder has a memory leak
  (P4) JDK-8022535: [TEST BUG] javax/swing/text/html/parser/Test8017492.java fails
  (P4) JDK-8226697: Several tests which need the @key headful keyword are missing it.
  (P4) JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful

core-libs:
  (P4) JDK-8238380: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10
  (P4) JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&'
  (P4) JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics

core-libs/java.lang:
  (P2) JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper may not result in an error
  (P4) JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous

core-libs/java.math:
  (P3) JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result

core-libs/java.net:
  (P3) JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
  (P3) JDK-8216974: HttpConnection not returned to the pool after 204 response
  (P3) JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException
  (P4) JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c "multiple definition" link errors with GCC10
  (P4) JDK-8238270:  java.net HTTP/2 client does not decrease stream count when receives 204 response
  (P4) JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
  (P4) JDK-8230000: some httpclients testng tests run zero test

core-libs/java.nio:
  (P3) JDK-8208281: java/nio/channels/AsynchronousSocketChannel/Basic.java timed out
  (P4) JDK-8230870:  (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
  (P4) JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
  (P4) JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011

core-libs/java.nio.charsets:
  (P3) JDK-8232161: Align some one-way conversion in MS950 charset with Windows

core-libs/java.rmi:
  (P4) JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/CloseServerSocket.java fails intermittently with Address already in use

core-libs/java.text:
  (P3) JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time

core-libs/java.util:i18n:
  (P3) JDK-8242283: Can't start JVM when java home path includes non-ASCII character
  (P3) JDK-8236548: Localized time zone name inconsistency between English and other locales
  (P4) JDK-8234347: "Turkey" meta time zone does not generate composed localized names

core-libs/javax.naming:
  (P2) JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect
  (P3) JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset
  (P4) JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider
  (P4) JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException
  (P4) JDK-8243138: Enhance BaseLdapServer to support starttls extended request
  (P4) JDK-8062947: Fix exception message to correctly represent LDAP connection failure

core-svc/debugger:
  (P2) JDK-8244703: "platform encoding not initialized" exceptions with debugger, JNI
  (P3) JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
  (P3) JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
  (P3) JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
  (P3) JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
  (P3) JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
  (P3) JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
  (P4) JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
  (P4) JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
  (P4) JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55
  (P4) JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh  failed
  (P4) JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout
  (P4) JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
  (P4) JDK-8227269: Slow class loading when running with JDWP
  (P4) JDK-8241750: x86_32 build failure after JDK-8227269
  (P5) JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest

core-svc/java.lang.management:
  (P2) JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility
  (P3) JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11
  (P3) JDK-8226575: OperatingSystemMXBean should be made container aware
  (P4) JDK-8231209: [REDO] JDK-8207266 ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
  (P4) JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes

core-svc/javax.management:
  (P3) JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError

core-svc/tools:
  (P3) JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
  (P4) JDK-8203026: java.rmi.NoSuchObjectException: no such object in table

hotspot:
  (P4) JDK-8233741: AES Countermode (CTR) optimization using AVX512 + VAES instructions

hotspot/compiler:
  (P1) JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
  (P2) JDK-8250609: C2 crash in IfNode::fold_compares
  (P2) JDK-8226536: Catch OOM from deopt that fails rematerializing objects
  (P2) JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc
  (P2) JDK-8246027: Minimal fastdebug build broken after JDK-8245801
  (P2) JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration
  (P2) JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code
  (P3) JDK-8245714: "Bad graph detected in build_loop_late" when loads are pinned on loop limit check uncommon branch
  (P3) JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node
  (P3) JDK-8247246: [JVMCI] `ResolvedJavaType.getDeclaredMethod()` can throw NoClassDefFoundError.
  (P3) JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base
  (P3) JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
  (P3) JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), "should be non-static concrete method");
  (P3) JDK-8244719: CTW: C2 compilation fails with "assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it"
  (P3) JDK-8240676: Meet not symmetric failure when running lucene on jdk8
  (P3) JDK-8246453: TestClone crashes with "all collected exceptions must come from the same place"
  (P4) JDK-8221658: aarch64: add necessary predicate for ubfx patterns
  (P4) JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
  (P4) JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions
  (P4) JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows.
  (P4) JDK-8234541: C1 emits an empty message when it inlines successfully
  (P4) JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
  (P4) JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp
  (P4) JDK-8222074: Enhance auto vectorization for x86
  (P4) JDK-8231586: enlarge encoding space for OopMapValue offsets
  (P4) JDK-8232083: Minimal VM is broken after JDK-8231586
  (P4) JDK-8214074: Optimize Ghash using AVX instructions
  (P4) JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
  (P4) JDK-8245801: StressRecompilation triggers assert "redundunt OSR recompilation detected. memory leak in CodeCache!"
  (P4) JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode
  (P4) JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
  (P4) JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark

hotspot/gc:
  (P2) JDK-8248851: CMS: Missing memory fences between free chunk check and klass read
  (P2) JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
  (P3) JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand
  (P3) JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  (P3) JDK-8249560: Shenandoah: Fix racy GC request handling
  (P3) JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk
  (P3) JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME
  (P4) JDK-8243326: Cleanup use of volatile in taskqueue code
  (P4) JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan
  (P4) JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
  (P4) JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
  (P4) JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase
  (P4) JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
  (P4) JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb
  (P4) JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
  (P4) JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
  (P4) JDK-8237182: Update copyright header for shenandoah and epsilon files

hotspot/jfr:
  (P2) JDK-8244287: JFR: Methods samples have line number 0
  (P3) JDK-8230767: FlightRecorderListener returns null recording
  (P3) JDK-8251354: Shenandoah: Fix JFR test failures
  (P4) JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
  (P4) JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
  (P4) JDK-8240360: NativeLibraryEvent has wrong library name on Linux
  (P4) JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions

hotspot/jvmti:
  (P4) JDK-8247615: Initialize the bytes left for the heap sampler
  (P4) JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code

hotspot/runtime:
  (P2) JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
  (P2) JDK-8206309: Tier1 SA tests fail
  (P3) JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
  (P3) JDK-8212200: assert(on_stack()) failed when shared java.lang.object is redefined by JVMTI agent
  (P3) JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs
  (P3) JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
  (P3) JDK-8234058: runtime/CompressedOops/CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
  (P3) JDK-8213275: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails with ClassNotFoundException: jdk.internal.vm.PostVMInitHook
  (P3) JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in
  (P4) JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
  (P4) JDK-8238284: [macos] Zero VM build fails due to an obvious typo
  (P4) JDK-8244196: adjust output in os_linux
  (P4) JDK-8243389: enhance os::pd_print_cpu_info on linux
  (P4) JDK-8240295: hs_err elapsed time in seconds is not accurate enough
  (P4) JDK-8233386: Initialize NULL fields for unused decorations
  (P4) JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds 
  (P4) JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
  (P4) JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass
  (P4) JDK-8221918: runtime/SharedArchiveFile/serviceability/ReplaceCriticalClasses.java fails: Shared archive not found
  (P4) JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows
  (P4) JDK-8231953: Wrong assumption in assertion in oop::register_oop

hotspot/svc:
  (P3) JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1
  (P3) JDK-8228448: Jconsole can't connect to itself
  (P4) JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java
  (P4) JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect

hotspot/svc-agent:
  (P3) JDK-8205534: Remove SymbolTable dependency from serviceability agent
  (P3) JDK-8204994: SA might fail to attach to process with "Windbg Error: WaitForEvent failed"
  (P4) JDK-8235846: Improve WindbgDebuggerLocal implementation
  (P4) JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM
  (P4) JDK-8214797: TestJmapCoreMetaspace.java timed out

infrastructure:
  (P4) JDK-8248495: [macos] zerovm is broken due to libffi headers location
  (P4) JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9

infrastructure/build:
  (P2) JDK-8246094: [macos] Sound Recording and playback is not working
  (P2) JDK-8249255: Build fails if source code in cygwin home dir
  (P2) JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows 
  (P3) JDK-8253283: [11u] Test build/translations/VerifyTranslations.java failing after JDK-8252258
  (P3) JDK-8213214: Set -Djava.io.tmpdir= when running tests
  (P4) JDK-8252258: [11u] JDK-8242154 changes the default vendor
  (P4) JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC
  (P4) JDK-8245832: JDK build make-static-libs should build all JDK libraries

security-libs/java.security:
  (P2) JDK-8244087: 2020-04-24 public suffix list update v ff6fcea
  (P2) JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
  (P3) JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
  (P3) JDK-8243320: Add SSL root certificates to Oracle Root CA program
  (P3) JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
  (P3) JDK-8242184: Default signature algorithm for an RSASSA-PSS key
  (P3) JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
  (P3) JDK-8237888: security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
  (P3) JDK-8172404: Tools should warn if weak algorithms are used before restricting them
  (P4) JDK-8245151: jarsigner should not raise duplicate warnings on verification
  (P4) JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
  (P4) JDK-8238388: libj2gss/NativeFunc.o  "multiple definition" link errors with GCC10
  (P4) JDK-8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out

security-libs/javax.crypto:
  (P2) JDK-8250787: Provider.put no longer registering aliases in FIPS env 

security-libs/javax.crypto:pkcs11:
  (P4) JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher

security-libs/javax.net.ssl:
  (P2) JDK-8223940: Private key not supported by chosen signature algorithm
  (P3) JDK-8246330: Add TLS Tests for Legacy ECDSA curves
  (P3) JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
  (P3) JDK-8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
  (P3) JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
  (P4) JDK-8228967: Trust/Key store and SSL context utilities for tests

security-libs/javax.security:
  (P3) JDK-8239385: Support the 'canonicalize' setting (krb5.conf) in the Kerberos client

security-libs/javax.smartcardio:
  (P4) JDK-8244151: Update MUSCLE PC/SC-Lite headers to1.8.26

security-libs/org.ietf.jgss:krb5:
  (P2) JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
  (P3) JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ

tools/jar:
  (P3) JDK-8212807: tools/jar/multiRelease/Basic.java times out

tools/javac:
  (P3) JDK-8193367: annotated type variables bounds crash javac
  (P3) JDK-8234687: change javap reporting on unknown attributes
  (P3) JDK-8221759: Crash when completing "java.io.File.path"
  (P3) JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
  (P3) JDK-8244763: Update --release 8 symbol information after JSR 337 MR3
  (P4) JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment

tools/javadoc(tool):
  (P2) JDK-8245981: Upgrade to jQuery 3.5.1
  (P3) JDK-8240169: javadoc fails to link to docs with non-matching modularity

tools/jshell:
  (P2) JDK-8215438: jshell tool: Ctrl-D causes EOF
  (P2) JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
  (P3) JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
  (P3) JDK-8224184: jshell got IOException at exiting with AIX
  (P3) JDK-8215243: JShell tests failing intermitently with "Problem cleaning up the following threads:"
  (P3) JDK-8223688: JShell: crash on the instantiation of raw anonymous class
  (P3) JDK-8211694: JShell: Redeclared variable should be reset
  (P3) JDK-8214491: Upgrade to JLine 3.9.0
  (P4) JDK-8232855: jshell missing word in /help help
  (P4) JDK-8229815: Upgrade Jline to 3.12.1

tools/launcher:
  (P4) JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment

xml/javax.xml.stream:
  (P3) JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter

xml/javax.xml.transform:
  (P4) JDK-8233686: XML transformer uses excessive amount of memory

xml/jaxp:
  (P3) JDK-8248348: Regression caused by the update to BCEL 6.0
  (P4) JDK-8230002: javax/xml/jaxp/unittest/transform/SecureProcessingTest.java runs zero test
  (P4) JDK-8230010: Remove jdk8037819/BasicTest1.java