RELEASE NOTES FOR: 16
====================================================================================================

Notes generated: Mon Nov 30 01:57:59 CET 2020

JIRA Query:
project = JDK AND (status in (Closed, Resolved)) AND (resolution not in ("Won't Fix", Duplicate,
"Cannot Reproduce", "Not an Issue", Withdrawn)) AND (labels not in (release-note, testbug,
openjdk-na, testbug) OR labels is EMPTY) AND (summary !~ 'testbug') AND (summary !~ 'problemlist')
AND (summary !~ 'problem list') AND (summary !~ 'release note') AND (issuetype != CSR) AND
fixVersion = 16

Acquiring pages (2097 total): .......................................... done
Loading issues (2097 total): .......................................... done
Resolving issues (2097 total): ......................................... done
Resolving parents (2097 total): ......................................... done
Resolving backports (2097 total): ......................................... done

JIRA Query:
project = JDK AND issuetype = JEP AND fixVersion = 16 ORDER BY summary ASC

Acquiring pages (18 total): . done
Loading issues (18 total): . done
Resolving issues (18 total):  done
Resolving parents (18 total):  done

Filtered 226 issues carried over, 190 pushes left.

Hint: Prefix bug IDs with https://bugs.openjdk.java.net/browse/ to reach the relevant JIRA entry.

JAVA ENHANCEMENT PROPOSALS (JEP):

  JEP 338: Vector API (Incubator)

      Provide an initial iteration of an [incubator module](https://openjdk.java.net/jeps/11),
      `jdk.incubator.vector`, to express vector computations that reliably compile at runtime to optimal
      vector hardware instructions on supported CPU architectures and thus achieve superior performance to
      equivalent scalar computations.

  JEP 347: Enable C++14 Language Features

      Allow the use of C++14 language features in JDK C++ source code, and give specific guidance about
      which of those features may be used in HotSpot code.

  JEP 356: Enhanced Pseudo-Random Number Generators

      Provide new interface types and implementations for pseudorandom number generators (PRNGs),
      including jumpable PRNGs and an additional class of splittable PRNG algorithms (LXM).

  JEP 357: Migrate from Mercurial to Git

      Migrate the OpenJDK Community's source code repositories from Mercurial (hg) to Git.

  JEP 369: Migrate to GitHub

      Host the OpenJDK Community's Git repositories on [GitHub](https://www.github.com/). In concert with
      [JEP 357 (Migrate from Mercurial to Git)](https://openjdk.java.net/jeps/357), this would migrate all
      single-repository OpenJDK Projects to GitHub, including both [JDK feature
      releases](https://openjdk.java.net/projects/jdk/) and [JDK update
      releases](https://openjdk.java.net/projects/jdk-updates/) for versions 11 and later.

  JEP 376: ZGC: Concurrent Thread-Stack Processing

      Move ZGC thread-stack processing from safepoints to a concurrent phase.

  JEP 380: Unix-Domain Socket Channels

      Add Unix-domain (`AF_UNIX`) socket support to the [socket channel][socketchannel] and [server-socket
      channel][serversocketchannel] APIs in the `java.nio.channels` package. Extend the [inherited channel
      mechanism][inherited] to support Unix-domain socket channels and server socket channels.

  JEP 386: Alpine Linux Port

      Port the JDK to Alpine Linux, and to other Linux distributions that use musl as their primary C
      library, on both the x64 and AArch64 architectures, 

  JEP 387: Elastic Metaspace

      Return unused HotSpot class-metadata (i.e., _metaspace_) memory to the operating system more
      promptly, reduce metaspace footprint, and simplify the metaspace code in order to reduce maintenance
      costs.

  JEP 388: Windows/AArch64 Port

      Port the JDK to Windows/AArch64.

  JEP 389: Foreign Linker API (Incubator)

      Introduce an API that offers statically-typed, pure-Java access to native code. This API, together
      with the Foreign-Memory API ([JEP 383][JEP-383]), will considerably simplify the otherwise
      error-prone process of binding to a native library.

  JEP 390: Warnings for Value-Based Classes

      Designate the primitive wrapper classes as "value-based" and deprecate their constructors for
      removal, prompting new deprecation warnings. Provide warnings about improper attempts to synchronize
      on instances of any value-based classes in the Java Platform.

  JEP 392: Packaging Tool

      Provide the `jpackage` tool, for packaging self-contained Java applications.

  JEP 393: Foreign-Memory Access API (Third Incubator)

      Introduce an API to allow Java programs to safely and efficiently access foreign memory outside of
      the Java heap.

  JEP 394: Pattern Matching for instanceof

      Enhance the Java programming language with _pattern matching_ for the `instanceof` operator.
      [Pattern matching](https://cr.openjdk.java.net/~briangoetz/amber/pattern-match.html) allows common
      logic in a program, namely the conditional extraction of components from objects, to be expressed
      more concisely and safely.

  JEP 395: Records

      Enhance the Java programming language with [records][records], which are classes that act as
      transparent carriers for immutable data. Records can be thought of as _nominal tuples_.

  JEP 396: Strongly Encapsulate JDK Internals by Default

      Strongly encapsulate all internal elements of the JDK by default, except for [critical internal
      APIs][crit] such as `sun.misc.Unsafe`.  Allow end users to choose the relaxed strong encapsulation
      that has been the default since JDK 9.

  JEP 397: Sealed Classes (Second Preview)

      Enhance the Java programming language with  [sealed classes and
      interfaces](https://cr.openjdk.java.net/~briangoetz/amber/datum.html). Sealed classes and interfaces
      restrict which other classes or interfaces may extend or implement them.


RELEASE NOTES, BY COMPONENT:

core-libs/java.time:

  JDK-8254679: US/Pacific-New Zone name removed as part of tzdata2020b

      Following JDK's update to tzdata2020b, long-obsolete files pacificnew and systemv have been
      removed. As a result, "US/Pacific-New" Zone name declared in the pacificnew data file is no
      longer available for use.
      
      Information regarding the update can be viewed at
      https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html

security-libs/java.security:

  JDK-8250756: Added Entrust Root Certification Authority - G4 certificate

      The following root certificate has been added to the cacerts truststore: ``` + Entrust   +
      entrustrootcag4     DN: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust,
      Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
      ```

  JDK-8250860: Added 3 SSL Corporation Root CA Certificates

      The following root certificates have been added to the cacerts truststore: ``` + SSL
      Corporation   + sslrootrsaca     DN: CN=SSL.com Root Certification Authority RSA, O=SSL
      Corporation, L=Houston, ST=Texas, C=US
      
      + sslrootevrsaca     DN: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation,
      L=Houston, ST=Texas, C=US
      
      + sslrooteccca     DN: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation,
      L=Houston, ST=Texas, C=US ```

  JDK-8248263:  jarsigner now preserves POSIX file permission and symlink attributes

      When signing a file that contains POSIX file permission or symlink attributes, `jarsigner`
      will now preserve these attributes in the newly signed file but will warn that these
      attributes are unsigned and not protected by the signature. The same warning will be printed
      during the `jarsigner -verify` operation for such files.
      
      Note that the `jar` tool does not read/write these attributes. This change would be more
      visible to tools like `unzip` where these attributes are preserved.

security-libs/javax.net.ssl:

  JDK-8256490: Disable TLS 1.0 and 1.1

      TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer considered secure and have
      been superseded by more secure and modern versions (TLS 1.2 and 1.3).
      
      These versions have now been disabled by default. If you encounter issues, you can, at your
      own risk, re-enable the versions by removing "TLSv1" and/or "TLSv1.1" from the
      `jdk.tls.disabledAlgorithms` security property in the `java.security` configuration file.


ALL FIXED ISSUES, BY COMPONENT AND PRIORITY:

client-libs/2d:
  (P2) JDK-8250605: Linux x86_32 builds fail after JDK-8249821
  (P3) JDK-8247872: Upgrade HarfBuzz to the latest 2.7.2
  (P3) JDK-8247867: Upgrade to freetype 2.10.2
  (P3) JDK-8245400: Upgrade to LittleCMS 2.11
  (P4) JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java
  (P4) JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows.
  (P4) JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz
  (P4) JDK-8249821: Separate libharfbuzz from libfontmanager

client-libs/java.awt:
  (P2) JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
  (P3) JDK-8253791: Issue with useAppleColor check in CSystemColors.m
  (P3) JDK-8249183: JVM crash in "AwtFrame::WmSize" method
  (P3) JDK-8232114: JVM crashed at imjpapi.dll in native code
  (P3) JDK-8212226: SurfaceManager throws "Invalid Image variant" for MultiResolutionImage (Windows)
  (P4) JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/MouseEventAfterStartDragTest.html test failed
  (P4) JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
  (P4) JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode
  (P4) JDK-8253274: The CycleDMImagetest brokes the system

client-libs/javax.imageio:
  (P4) JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java

client-libs/javax.sound:
  (P3) JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7

client-libs/javax.swing:
  (P3) JDK-8213535: Windows HiDPI html lightweight tooltips are truncated

core-libs:
  (P4) JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem
  (P4) JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics

core-libs/java.lang:
  (P3) JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
  (P4) JDK-8249217: Unexpected StackOverflowError in "process reaper" thread still happens

core-libs/java.time:
  (P3) JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
  (P3) JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  (P3) JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d

core-libs/java.util:i18n:
  (P4) JDK-8252497: Incorrect numeric currency code for ROL

core-libs/javax.naming:
  (P3) JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos
  (P4) JDK-8248865: Document JNDI/LDAP timeout properties

core-svc/tools:
  (P3) JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations

globalization/locale-data:
  (P3) JDK-8250665: Wrong translation for the month of May in ar_JO, ar_LB and ar_SY

hotspot:
  (P4) JDK-8248403: AArch64: Remove uses of kernel integer types
  (P4) JDK-8248414: AArch64: Remove uses of long and unsigned long ints

hotspot/compiler:
  (P1) JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
  (P1) JDK-8248347: windows build broken by JDK-8243114
  (P2) JDK-8252292: 8240795 may cause anti-dependence to be missed
  (P2) JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
  (P2) JDK-8250609: C2 crash in IfNode::fold_compares
  (P2) JDK-8253191: C2: Masked byte comparisons with large masks produce wrong result on x86
  (P2) JDK-8253566: clazz.isAssignableFrom will return false for interface implementors
  (P2) JDK-8249880: JVMCI calling register_nmethod without CodeCache lock
  (P2) JDK-8254104: MethodCounters must exist before nmethod is installed
  (P2) JDK-8251260: two MD5 tests fail "RuntimeException: Unexpected count of intrinsic"
  (P2) JDK-8251994: VM crashed running TestComplexAddrExpr.java test with -XX:UseAVX=X
  (P2) JDK-8255550: x86: Assembler::cmpq(Address dst, Register src) encoding is incorrect
  (P3) JDK-8254734: "dead loop detected" assert failure with patch from 8223051
  (P3) JDK-8251923: "Invalid JNI handle" assertion failure in JVMCICompiler::force_comp_at_level_simple()
  (P3) JDK-8250233: -XX:+CITime triggers guarantee(events != NULL) in jvmci.cpp:173
  (P3) JDK-8247200: [aarch64] assert((unsigned)fpargs < 32)
  (P3) JDK-8248411: [aarch64] Insufficient error handling when CodeBuffer is exhausted
  (P3) JDK-8255578: [JVMCI] be more careful about reflective reads of Class.componentType.
  (P3) JDK-8252881: [JVMCI] ResolvedJavaType.resolveMethod fails in fastdebug when invoked with a constructor
  (P3) JDK-8249781: AArch64: AOT compiled code crashes if C2 allocates r27
  (P3) JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
  (P3) JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
  (P3) JDK-8250824: AArch64: follow up for JDK-8248414
  (P3) JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset() is incorrect for stub calls
  (P3) JDK-8248671: AArch64: Remove unused variables
  (P3) JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
  (P3) JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
  (P3) JDK-8247251: Assert '(_pcs_length == 0 || last_pc()->pc_offset() < pc_offset) failed: must specify a new, larger pc offset' failure
  (P3) JDK-8249603: C1: assert(has_error == false) failed: register allocation invalid
  (P3) JDK-8255058: C1: assert(is_virtual()) failed: type check
  (P3) JDK-8248816: C1: Fix signature conflict in LIRGenerator::strength_reduce_multiply
  (P3) JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
  (P3) JDK-8250825: C2 crashes with assert(field != __null) failed: missing field
  (P3) JDK-8248552: C2 crashes with SIGFPE due to division by zero
  (P3) JDK-8249607: C2: assert(!had_error) failed: bad dominance
  (P3) JDK-8253404: C2: assert(C->live_nodes() <= C->max_node_limit()) failed: Live Node limit exceeded limit
  (P3) JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions allowed
  (P3) JDK-8249605: C2: assert(no_dead_loop) failed: dead loop detected
  (P3) JDK-8250548: libgraal can deadlock in -Xcomp mode
  (P3) JDK-8252696: Loop unswitching may cause out of bound array load to be executed
  (P3) JDK-8249749: modify a primitive array through a stream and a for cycle causes jre crash
  (P3) JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
  (P3) JDK-8251535: Partial peeling at unsigned test adds incorrect loop exit check
  (P3) JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
  (P3) JDK-8248226: TestCloneAccessStressGCM fails with -XX:-ReduceBulkZeroing
  (P3) JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint
  (P4) JDK-8253874: [JVMCI] added test omitted in 8252881
  (P4) JDK-8255068: [JVMCI] errors during compiler creation can be hidden
  (P4) JDK-8248321: [JVMCI] improve libgraal logging and fatal error handling
  (P4) JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
  (P4) JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg
  (P4) JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows.
  (P4) JDK-8253118: Avoid unnecessary deopts when OSR nmethods of the same level are present.
  (P4) JDK-8248467: C2: compiler/intrinsics/object/TestClone fails with -XX:+VerifyGraphEdges
  (P4) JDK-8250902: Implement MD5 Intrinsics on x86
  (P4) JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
  (P4) JDK-8223347: Integration of Vector API (Incubator)
  (P4) JDK-8250612: jvmciCompilerToVM.cpp declares jio_printf with "void" return type, should be "int"
  (P4) JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
  (P4) JDK-8248190: PPC:  Enable Power10 system and use new byte-reverse instructions 
  (P4) JDK-8253631: Remove unimplemented CompileBroker methods after JEP-165
  (P4) JDK-8249165: Remove unneeded nops introduced by 8234160 changes
  (P4) JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN
  (P4) JDK-8248359: Update JVMCI
  (P5) JDK-8255067: Restore Copyright line in file modified by 8253191

hotspot/gc:
  (P2) JDK-8256051: nmethod_entry_barrier stub miscalculates xmm spill size on x86_32
  (P2) JDK-8247736: Shenandoah: assert(_nm->is_alive()) failed: only alive nmethods here
  (P2) JDK-8249230: Shenandoah: assertion failure with -XX:-ResizeTLAB
  (P2) JDK-8247670: Shenandoah: deadlock during class unloading OOME
  (P2) JDK-8254319: Shenandoah: Interpreter native-LRB needs to activate during HAS_FORWARDED
  (P2) JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U
  (P2) JDK-8247593: Shenandoah: should not block pacing reporters
  (P3) JDK-8027761: Investigate fast-path for scanning only objects with references during gc
  (P3) JDK-8251910: Shenandoah: Handshake threads between weak-roots and reset phases
  (P3) JDK-8248041: Shenandoah: pre-Full GC root updates may miss some roots
  (P3) JDK-8247358: Shenandoah: reconsider free budget slice for marking
  (P4) JDK-8253219: Epsilon: clean up unnecessary includes
  (P4) JDK-8027545: Improve object array chunking test in G1's copy_to_survivor_space
  (P4) JDK-8247860: Shenandoah: add update watermark line in rich assert failure message
  (P4) JDK-8248632: Shenandoah: build fails without both JVMTI and JFR
  (P4) JDK-8254320: Shenandoah: C2 native LRB should activate for non-cset objects
  (P4) JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
  (P4) JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
  (P4) JDK-8254560: Shenandoah: Concurrent Strong Roots logging is incorrect
  (P4) JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier
  (P4) JDK-8248634: Shenandoah: incorrect include in shenandoahInitLogger.cpp
  (P4) JDK-8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback
  (P4) JDK-8247367: Shenandoah: pacer should wait on lock instead of exponential backoff
  (P4) JDK-8249649: Shenandoah: provide per-cycle pacing stats
  (P4) JDK-8247845: Shenandoah: refactor TLAB/GCLAB retirement code
  (P4) JDK-8241065: Shenandoah: remove leftover code after JDK-8231086
  (P4) JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
  (P4) JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support
  (P4) JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
  (P4) JDK-8248652: Shenandoah: SATB buffer handling may assume no forwarded objects
  (P4) JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
  (P4) JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
  (P4) JDK-8253222: Shenandoah: unused AlwaysTrueClosure after JDK-8246591
  (P4) JDK-8252367: Undo JDK-8245000: Windows GDI functions don't support large pages
  (P4) JDK-8252368: Undo JDK-8245002: Windows GDI functions don't support NUMA interleaving

hotspot/jfr:
  (P3) JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
  (P3) JDK-8250928: JFR: Improve hash algorithm for stack traces
  (P4) JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9)

hotspot/jvmti:
  (P3) JDK-8216324: GetClassMethods is confused by the presence of default methods in super interfaces
  (P4) JDK-8247615: Initialize the bytes left for the heap sampler

hotspot/runtime:
  (P2) JDK-8251365: Build failure on AIX after 8250636
  (P2) JDK-8249192: MonitorInfo stores raw oops across safepoints
  (P2) JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
  (P2) JDK-8253284: Zero OrderAccess barrier mappings are incorrect
  (P3) JDK-8253727: [cgroups v2] Memory and swap limits reported incorrectly
  (P3) JDK-8253714: [cgroups v2] Soft memory limit incorrectly using memory.high
  (P3) JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield
  (P3) JDK-8248112: array index out of bound in FileMapInfo::check_paths
  (P3) JDK-8251118: BiasedLocking::preserve_marks should not have a HandleMark
  (P3) JDK-8252359: HotSpot Not Identifying it is Running in a Container
  (P3) JDK-8241053: Hotspot runtime/CommandLine/OptionsValidation/TestOptionsWithRanges.java test fails on Alpine Linux with debug build
  (P3) JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  (P3) JDK-8249672: Include microcode revision in features_string on x86
  (P3) JDK-8250810: Push missing parts of JDK-8248817
  (P3) JDK-8248657: Windows: strengthening in ThreadCritical regarding memory model
  (P3) JDK-8255065: Zero: accessor_entry misses the IRIW case
  (P4) JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
  (P4) JDK-8254190: [s390] interpreter misses exception check after calling monitorenter
  (P4) JDK-8250598: Hyper-V is detected in spite of running on host OS
  (P4) JDK-8243290: Improve diagnostic messages for class verification and redefinition failures
  (P4) JDK-8250636: iso8601_time returns incorrect offset part on MacOS
  (P4) JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds 
  (P4) JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
  (P4) JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
  (P4) JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
  (P4) JDK-8256618: Zero: Linux x86_32 build still fails
  (P4) JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp

hotspot/svc-agent:
  (P4) JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM

infrastructure:
  (P4) JDK-8248495: [macos] zerovm is broken due to libffi headers location

infrastructure/build:
  (P3) JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2
  (P3) JDK-8248667: Need support for building native libraries located in the test/lib directory
  (P3) JDK-8213214: Set -Djava.io.tmpdir= when running tests
  (P4) JDK-8250876: Fix issues with cross-compile on macos

security-libs/java.security:
  (P2) JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
  (P2) JDK-8251859: sun/security/validator/PKIXValAndRevCheckTests.java fails with "RuntimeException: Received unexpected exception"
  (P3) JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
  (P3) JDK-8243320: Add SSL root certificates to Oracle Root CA program
  (P3) JDK-8218021: Have jarsigner preserve posix permission attributes
  (P3) JDK-8243559: Remove root certificates with 1024-bit keys
  (P3) JDK-8250968: Symlinks attributes not preserved when using jarsigner on zip files

security-libs/javax.crypto:pkcs11:
  (P4) JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher

security-libs/javax.net.ssl:
  (P2) JDK-8202343: Disable TLS 1.0 and 1.1
  (P2) JDK-8255603: Memory/Performance regression after JDK-8210985
  (P3) JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts

security-libs/javax.xml.crypto:
  (P3) JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI()
  (P3) JDK-8247907: XMLDsig logging does not work

security-libs/org.ietf.jgss:krb5:
  (P2) JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets

tools/javac:
  (P3) JDK-8247334: Trees.getScope crashes for annotated local records
  (P4) JDK-8256809: Annotation processing causes NPE during flow analysis
  (P4) JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment

xml/jaxp:
  (P3) JDK-8248348: Regression caused by the update to BCEL 6.0