RELEASE NOTES FOR: 17.0.15 ==================================================================================================== Notes generated: Sat Jul 05 05:56:22 CEST 2025 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/javax.net.ssl: JDK-8346587: Distrust TLS Server Certificates Anchored by Camerfirma Root Certificates and Issued After April 15, 2025 The JDK will stop trusting TLS server certificates issued after April 15, 2025 and anchored by Camerfirma root certificates, in line with similar plans announced by Google, Mozilla, Apple, and Microsoft. TLS server certificates issued on or before April 15, 2025 will continue to be trusted until they expire. Certificates issued after that date, and anchored by any of the Certificate Authorities in the table below, will be rejected. The restrictions are enforced in the JDK implementation (the `SunJSSE` Provider) of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server's certificate chain is anchored by any of the Certificate Authorities in the table below and the certificate has been issued after April 15, 2025. An application will receive an exception with a message indicating the trust anchor is not trusted, for example: ``` "TLS Server certificate issued after 2025-04-15 and anchored by a distrusted legacy Camerfirma root CA: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU" ``` The JDK can be configured to trust these certificates again by removing "CAMERFIRMA_TLS" from the `jdk.security.caDistrustPolicies` security property in the `java.security` configuration file. The restrictions are imposed on the following Camerfirma Root certificates included in the JDK:
Root Certificates distrusted after 2025-04-15
Distinguished Name SHA-256 Fingerprint
CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU

0C:25:8A:12:A5:67:4A:EF:25:F2:8B:A7:DC:FA:EC:EE:A3:48:E5:41:E6:F5:CC:4E:E6:3B:71:B3:61:60:6A:C3
CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU

06:3E:4A:FA:C4:91:DF:D3:32:F3:08:9B:85:42:E9:46:17:D8:93:D7:FE:94:4E:10:A7:93:7E:E2:9D:96:93:C0
CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU

13:63:35:43:93:34:A7:69:80:16:A0:D3:24:DE:72:28:4E:07:9D:7B:52:20:BB:8F:BD:74:78:16:EE:BE:BA:CA
You can also use the `keytool` utility from the JDK to print out details of the certificate chain, as follows: keytool -v -list -alias -keystore If any of the certificates in the chain are issued by one of the root CAs in the table above are listed in the output you will need to update the certificate or contact the organization that manages the server. security-libs/javax.crypto:pkcs11: JDK-8293345: Legacy Mechanism Check in SunPKCS11 Provider Is Enhanced with Service Type Native PKCS11 mechanisms which support decryption but not encryption, or signature verification but not signing, are considered legacy and are disabled by default. The legacy mechanism check in SunPKCS11 provider is enhanced with the service type. For example, prior to this fix, a mechanism supporting encryption, decryption, and verification but not signing, is considered legacy and can't be used at all. After this fix, the corresponding Cipher service using this mechanism is available since both encryption and decryption are supported. However, the corresponding Signature service is not since only verification is supported. To bypass the legacy mechanism check, set the PKCS11 provider configuration attribute "allowLegacy" to true. The default value is false. Note that it is the caller's responsibility to make sure the legacy mechanism is not used for the unsupported functionality. hotspot/runtime: JDK-8308341: The JNI_GetCreatedJavaVMs Method Will Now Only Return a Fully Initialized VM In prior releases, `JNI_GetCreatedJavaVMs`: ``` jint JNI_GetCreatedJavaVMs(JavaVM **vmBuf, jsize bufLen, jsize *nVMs); ``` could return a `JavaVM`, via the `vmBuf` array, that was still in the process of being initialized and may not be ready for use. This has now changed so that it will only return fully initialized VMs. It is important that the programmer checks that the returned number of VMs, in `nVMs`, is greater than zero, before trying to use any `vmBuf` entries. security-libs/java.security: JDK-8179502: Enhanced OCSP, Certificate, and CRL Fetch Timeouts This feature delivers an enhanced syntax for properties related to certificate, CRL, and OCSP connect and read timeouts. The new syntax allows the timeout values to be specified either in seconds or milliseconds. This feature also delivers three new System properties related to connect and read timeouts. *New properties*: The existing `com.sun.security.ocsp.timeout` property will now be paired with the new `com.sun.security.ocsp.readtimeout` property. The former property will be used to set timeouts for the transport-layer connection while the latter will be used to manage timeouts for reading the data. The default value for the com.sun.security.ocsp.readtimeout System property will be the same as whatever value is set for the com.sun.security.ocsp.timeout property, even if the latter property is not set (in which case both properties will be set to the default value of com.sun.security.ocsp.timeout). The new `com.sun.security.cert.timeout` and `com.sun.security.cert.readtimeout` properties will be used to control connect and read timeouts, respectively, when following an X.509 certificate's AuthorityInfoAccess extension. For the certificate fetching properties, the `com.sun.security.enableAIAcaIssuers` property must be set to `true` in order for fetching to occur and these property timeouts to be enabled. *Enhanced timeout syntax*: The new syntax applies to the aforementioned properties, and also to the `com.sun.security.crl.timeout` and `com.sun.security.crl.readtimeout` properties as well. The allowed syntax is as follows: - A decimal integer will be interpreted in seconds and ensures backward compatibility. - A decimal integer ending in "s" (case-insensitive, no space) appended to it. This will also be interpreted in seconds. - A decimal integer value with "ms" (case-insensitive, no space) appended to it. This will be interpreted as milliseconds. For example, a value of "2500ms" will be a 2.5 second timeout. - Negative, non-numeric, or non-decimal (for example, hexadecimal values prepended by "0x") values will be interpreted as illegal and will default to the 15 second timeout. - Whether the value is interpreted in seconds or milliseconds, a value of zero will disable the timeout. JDK-8179502: Enhanced OCSP, Certificate, and CRL Fetch Timeouts This feature delivers an enhanced syntax for properties related to certificate, CRL, and OCSP connect and read timeouts. The new syntax allows the timeout values to be specified either in seconds or milliseconds. This feature also delivers three new System properties related to connect and read timeouts. *New properties*: The existing `com.sun.security.ocsp.timeout` property will now be paired with the new `com.sun.security.ocsp.readtimeout` property. The former property will be used to set timeouts for the transport-layer connection while the latter will be used to manage timeouts for reading the data. The new `com.sun.security.cert.timeout` and `com.sun.security.cert.readtimeout` properties will be used to control connect and read timeouts, respectively, when following an X.509 certificate's AuthorityInfoAccess extension. For the certificate fetching properties, the `com.sun.security.enableAIAcaIssuers` property must be set to `true` in order for fetching to occur and these property timeouts to be enabled. *Enhanced timeout syntax*: The new syntax applies to the aforementioned properties, and also to the `com.sun.security.crl.timeout` and `com.sun.security.crl.readtimeout` properties as well. The allowed syntax is as follows: - A decimal integer will be interpreted in seconds and ensures backward compatibility. - A decimal integer ending in "s" (case-insensitive, no space) appended to it. This will also be interpreted in seconds. - A decimal integer value with "ms" (case-insensitive, no space) appended to it. This will be interpreted as milliseconds. For example, a value of "2500ms" will be a 2.5 second timeout. - Negative, non-numeric, or non-decimal (for example, hexadecimal values prepended by "0x") values will be interpreted as illegal and will default to the 15 second timeout. - Whether the value is interpreted in seconds or milliseconds, a value of zero will disable the timeout. JDK-8309841: Jarsigner Should Print a Warning If an Entry Is Removed If an entry is removed from a signed JAR file, there is no mechanism to detect that it has been removed using the `JarFile` API, since the `getJarEntry` method returns `null` as if the entry had never existed. With this change, the `jarsigner -verify` command analyzes the signature files and if some sections do not have matching file entries, it prints out the following warning: "This JAR contains signed entries for files that do not exist". Users can further find out the names of these entries by adding the `-verbose` option to the command. ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs: (P4) JDK-8339524: Clean up a few ExtendedRobot tests (P4) JDK-8343128: PassFailJFrame.java test result: Error. Bad action for script: build} (P4) JDK-8283664: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PrintTextTest.java (P4) JDK-8345468: test/jdk/javax/swing/JScrollBar/4865918/bug4865918.java fails in ubuntu22.04 (P5) JDK-8274893: Update java.desktop classes to use try-with-resources client-libs/2d: (P4) JDK-8277240: java/awt/Graphics2D/ScaledTransform/ScaledTransform.java dialog does not get disposed (P4) JDK-8320676: Manual printer tests have no Pass/Fail buttons, instructions close set 1 (P4) JDK-8324807: Manual printer tests have no Pass/Fail buttons, instructions close set 2 (P4) JDK-8340411: open source several 2D imaging tests (P4) JDK-8340078: Open source several 2D tests (P4) JDK-8339883: Open source several AWT/2D related tests client-libs/java.awt: (P1) JDK-8340480: Bad copyright notices in changes from JDK-8339902 (P2) JDK-8348625: [21u, 17u] Revert JDK-8185862 to restore old java.awt.headless behavior on Windows (P3) JDK-8312518: [macos13] setFullScreenWindow() shows black screen on macOS 13 & above (P3) JDK-8294067: [macOS] javax/swing/JComboBox/6559152/bug6559152.java Cannot select an item from popup with the ENTER key. (P3) JDK-8332158: [XWayland] test/jdk/java/awt/Mouse/EnterExitEvents/ResizingFrameTest.java (P3) JDK-8348675: TrayIcon tests fail in Ubuntu 24.10 Wayland (P4) JDK-8313633: [macOS] java/awt/dnd/NextDropActionTest/NextDropActionTest.java fails with java.lang.RuntimeException: wrong next drop action! (P4) JDK-8292588: [macos] Multiscreen/MultiScreenLocationTest/MultiScreenLocationTest.java: Robot.mouseMove test failed on Screen #0 (P4) JDK-8198237: [macos] Test java/awt/Frame/ExceptionOnSetExtendedStateTest/ExceptionOnSetExtendedStateTest.java fails (P4) JDK-8329692: Add more details to FrameStateTest.java test instructions (P4) JDK-8292848: AWT_Mixing and TrayIcon tests fail on el8 with hard-coded isOel7 (P4) JDK-8328387: Convert java/awt/Frame/FrameStateTest/FrameStateTest.html applet test to main (P4) JDK-8328005: Convert java/awt/im/JTextFieldTest.java applet test to main (P4) JDK-8328185: Convert java/awt/image/MemoryLeakTest/MemoryLeakTest.java applet test to main (P4) JDK-8328368: Convert java/awt/image/multiresolution/MultiDisplayTest/MultiDisplayTest.java applet test to main (P4) JDK-8328730: Convert java/awt/print/bug8023392/bug8023392.html applet test to main (P4) JDK-8328370: Convert java/awt/print/Dialog/PrintApplet.java applet test to main (P4) JDK-8328719: Convert java/awt/print/PageFormat/SetOrient.html applet test to main (P4) JDK-8328827: Convert java/awt/print/PrinterJob/PrinterDialogsModalityTest/PrinterDialogsModalityTest.html applet test to main (P4) JDK-8329322: Convert PageFormat/Orient.java to use PassFailJFrame (P4) JDK-8329210: Delete Redundant Printer Dialog Modality Test (P4) JDK-8346887: DrawFocusRect() may cause an assertion failure (P4) JDK-8342541: Exclude List/KeyEventsTest/KeyEventsTest.java from running on macOS (P4) JDK-8339943: Frame not disposed in java/awt/dnd/DropActionChangeTest.java (P4) JDK-8337886: java/awt/Frame/MaximizeUndecoratedTest.java fails in OEL due to a slight color difference (P4) JDK-8198666: Many java/awt/Modal/OnTop/ test fails on mac (P4) JDK-8340719: Open source AWT List tests (P4) JDK-8340687: Open source closed frame tests #1 (P4) JDK-8339902: Open source couple TextField related tests (P4) JDK-8328753: Open source few Undecorated Frame tests (P4) JDK-8341111: open source several AWT tests including menu shortcut tests (P4) JDK-8333360: PrintNullString.java doesn't use float arguments (P4) JDK-8329320: Simplify awt/print/PageFormat/NullPaper.java test (P4) JDK-8341037: Use standard layouts in DefaultFrameIconTest.java and MenuCrash.java (P4) JDK-8333403: Write a test to check various components events are triggered properly (P4) JDK-8342098: Write a test to compare the images client-libs/javax.accessibility: (P3) JDK-8339728: [Accessibility,Windows,JAWS] Bug in the getKeyChar method of the AccessBridge class (P3) JDK-8283387: [macos] a11y : Screen magnifier does not show selected Tab (P4) JDK-8283404: [macos] a11y : Screen magnifier does not show JMenu name (P4) JDK-8341453: java/awt/a11y/AccessibleJTableTest.java fails in some cases where the test tables are not visible client-libs/javax.imageio: (P3) JDK-8266435: WBMPImageReader.read() should not truncate the input stream (P4) JDK-6355567: AdobeMarkerSegment causes failure to read valid JPEG (P4) JDK-8342634: javax/imageio/plugins/wbmp/WBMPStreamTruncateTest.java creates temp file in src dir client-libs/javax.swing: (P2) JDK-8347427: JTabbedPane/8134116/Bug8134116.java has no license header (P2) JDK-8316627: JViewport Test headless failure (P2) JDK-8301989: new javax.swing.text.DefaultCaret().setBlinkRate(N) results in NPE (P3) JDK-8299077: [REDO] JDK-4512626 Non-editable JTextArea provides no visual indication of keyboard focus (P3) JDK-8328553: Get rid of JApplet in test/jdk/sanity/client/lib/SwingSet2/src/DemoModule.java (P3) JDK-8342635: javax/swing/JFileChooser/FileSystemView/WindowsDefaultIconSizeTest.java creates tmp file in src dir (P4) JDK-8065099: [macos] javax/swing/PopupFactory/6276087/NonOpaquePopupMenuTest.java fails: no background shine through (P4) JDK-8341316: [macos] javax/swing/ProgressMonitor/ProgressMonitorEscapeKeyPress.java fails sometimes in macos (P4) JDK-8299127: [REDO] JDK-8194048 Regression automated test '/open/test/jdk/javax/swing/text/DefaultCaret/HidingSelection/HidingSelectionTest.java' fails (P4) JDK-8299128: [REDO] JDK-8213562 Test javax/swing/text/DefaultCaret/HidingSelection/MultiSelectionTest.java fails (P4) JDK-8208565: [TEST_BUG] javax\swing\PopupFactory\6276087\NonOpaquePopupMenuTest.java throws NPE (P4) JDK-8226938: [TEST_BUG]GTK L&F: There is no Details button in FileChooser Dialog (P4) JDK-8226933: [TEST_BUG]GTK L&F: There is no swatches or RGB tab in JColorChooser (P4) JDK-8328558: Convert javax/swing/JCheckBox/8032667/bug8032667.java applet test to main (P4) JDK-8328717: Convert javax/swing/JColorChooser/8065098/bug8065098.java applet test to main (P4) JDK-8341978: Improve JButton/bug4490179.java (P4) JDK-8346324: javax/swing/JScrollBar/4865918/bug4865918.java fails in CI (P4) JDK-8346828: javax/swing/JScrollBar/4865918/bug4865918.java still fails in CI (P4) JDK-8346055: javax/swing/text/StyledEditorKit/4506788/bug4506788.java fails in ubuntu22.04 (P4) JDK-8315825: Open some swing tests (P4) JDK-8315882: Open some swing tests 2 (P4) JDK-8316146: Open some swing tests 4 (P4) JDK-8316218: Open some swing tests 5 (P4) JDK-8316371: Open some swing tests 6 (P4) JDK-8315952: Open source several Swing JToolbar JTooltip JTree tests (P4) JDK-8315883: Open source several Swing JToolbar tests (P4) JDK-8316149: Open source several Swing JTree JViewport KeyboardManager tests (P4) JDK-8316056: Open source several Swing JTree tests (P4) JDK-8327857: Remove applet usage from JColorChooser tests Test4222508 (P4) JDK-8327859: Remove applet usage from JColorChooser tests Test4319113 (P4) JDK-8328121: Remove applet usage from JColorChooser tests Test4759306 (P4) JDK-8328130: Remove applet usage from JColorChooser tests Test4759934 (P4) JDK-8328227: Remove applet usage from JColorChooser tests Test4887836 (P4) JDK-8328380: Remove applet usage from JColorChooser tests Test6348456 (P4) JDK-8328403: Remove applet usage from JColorChooser tests Test6977726 (P4) JDK-8328819: Remove applet usage from JFileChooser tests bug6698013 (P4) JDK-8342602: Remove JButton/PressedButtonRightClickTest test (P4) JDK-8341982: Simplify JButton/bug4323121.java (P4) JDK-8338668: Test javax/swing/JFileChooser/8080628/bug8080628.java doesn't test for GTK L&F (P5) JDK-8342508: Use latch in BasicMenuUI/bug4983388.java instead of delay core-libs: (P4) JDK-8336012: Fix usages of jtreg-reserved properties core-libs/java.io: (P3) JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java failing (P4) JDK-8345368: java/io/File/createTempFile/SpecialTempFile.java fails on Windows Server 2025 core-libs/java.lang: (P4) JDK-8339687: Rearrange reachabilityFence()s in jdk.test.lib.util.ForceGC (P4) JDK-8319677: Test jdk/internal/misc/VM/RuntimeArguments.java should be marked as flagless core-libs/java.lang.foreign: (P3) JDK-8331735: UpcallLinker::on_exit races with GC when copying frame anchor (P4) JDK-8286875: ProgrammableUpcallHandler::on_entry/on_exit access thread fields from native core-libs/java.lang.invoke: (P4) JDK-8335150: Test LogGeneratedClassesTest.java fails on rpmbuild mock enviroment (P4) JDK-8319567: Update java/lang/invoke tests to support vm flags core-libs/java.lang.module: (P4) JDK-8319676: A couple of jdk/modules/incubator/ tests ignore VM flags core-libs/java.lang:class_loading: (P4) JDK-8319672: Several classloader tests ignore VM flags core-libs/java.lang:reflect: (P4) JDK-8319568: Update java/lang/reflect/exeCallerAccessTest/CallerAccessTest.java to accept vm flags core-libs/java.net: (P4) JDK-8345375: Improve debuggability of test/jdk/java/net/Socket/CloseAvailable.java (P4) JDK-8318442: java/net/httpclient/ManyRequests2.java fails intermittently on Linux (P4) JDK-8342811: java/net/httpclient/PlainProxyConnectionTest.java failed: Unexpected connection count: 5 core-libs/java.nio: (P2) JDK-8342145: File libCreationTimeHelper.c compile fails on Alpine (P3) JDK-8341881: [REDO] java/nio/file/attribute/BasicFileAttributeView/CreationTime.java#tmp fails on alinux3 (P3) JDK-8346671: java/nio/file/Files/probeContentType/Basic.java fails on Windows 2025 (P4) JDK-8346972: Test java/nio/channels/FileChannel/LoopingTruncate.java fails sometimes with IOException: There is not enough space on the disk (P4) JDK-8338426: Test java/nio/channels/Selector/WakeupNow.java failed core-libs/java.text: (P3) JDK-8305853: java/text/Format/DateFormat/DateFormatRegression.java fails with "Uncaught exception thrown in test method Test4089106" (P4) JDK-8325908: Finish removal of IntlTest and CollatorTest (P4) JDK-8306711: Improve diagnosis of `IntlTest` framework (P4) JDK-8317631: Refactor ChoiceFormat tests to use JUnit (P4) JDK-8316696: Remove the testing base classes: IntlTest and CollatorTest core-libs/java.time: (P3) JDK-8347965: (tz) Update Timezone Data to 2025a (P4) JDK-8352097: (tz) zone.tab update missed in 2025a backport (P4) JDK-8324672: Update jdk/java/time/tck/java/time/TCKInstant.java now() to be more robust core-libs/java.util: (P4) JDK-8319569: Several java/util tests should be updated to accept VM flags core-libs/java.util.jar: (P5) JDK-8339154: Cleanups and JUnit conversion of test/jdk/java/util/zip/Available.java core-libs/java.util.logging: (P4) JDK-8319647: Few java/lang/System/LoggerFinder/modules tests ignore vm flags core-libs/java.util:i18n: (P4) JDK-8311663: Additional refactoring of Locale tests to JUnit (P4) JDK-8320714: java/util/Locale/LocaleProvidersRun.java and java/util/ResourceBundle/modules/visibility/VisibilityTest.java timeout after passing (P4) JDK-8310234: Refactor Locale tests to use JUnit (P4) JDK-8316559: Refactor some util/Calendar tests to JUnit (P4) JDK-8312416: Tests in Locale should have more descriptive names (P4) JDK-8344589: Update IANA Language Subtag Registry to Version 2024-11-19 core-svc: (P4) JDK-8327505: Test com/sun/jmx/remote/NotificationMarshalVersions/TestSerializationMismatch.java fails core-svc/debugger: (P4) JDK-8325042: Remove unused JVMDITools test files (P4) JDK-8333391: Test com/sun/jdi/InterruptHangTest.java failed: Thread was never interrupted during sleep (P4) JDK-8315486: vmTestbase/nsk/jdwp/ThreadReference/ForceEarlyReturn/forceEarlyReturn002/forceEarlyReturn002.java timed out core-svc/javax.management: (P4) JDK-8343378: Exceptions in javax/management DeadLockTest.java do not cause test failure (P4) JDK-8299739: HashedPasswordFileTest.java and ExceptionTest.java can fail with java.lang.NullPointerException (P4) JDK-8343491: javax/management/remote/mandatory/connection/DeadLockTest.java failing with NoSuchObjectException: no such object in table (P4) JDK-8311306: Test com/sun/management/ThreadMXBean/ThreadCpuTimeArray.java failed: out of expected range (P4) JDK-8334777: Test javax/management/remote/mandatory/notif/NotifReconnectDeadlockTest.java failed with NullPointerException hotspot/compiler: (P2) JDK-8342498: Add test for Allocation elimination after use as alignment reference by SuperWord (P3) JDK-8345296: AArch64: VM crashes with SIGILL when prctl is disallowed (P3) JDK-8338100: C2: assert(!n_loop->is_member(get_loop(lca))) failed: control must not be back in the loop (P3) JDK-8328085: C2: Use after free in PhaseChaitin::Register_Allocate() (P4) JDK-8343724: [PPC64] Disallow OptoScheduling (P4) JDK-8326421: Add jtreg test for large arrayCopy disjoint case. (P4) JDK-8338595: Add more linesize for MIME decoder in macro bench test Base64Decode (P4) JDK-8325659: Normalize Random usage by incubator vector tests (P4) JDK-8336692: Redo fix for JDK-8284620 hotspot/gc: (P4) JDK-8337222: gc/TestDisableExplicitGC.java fails due to unexpected CodeCache GC hotspot/jfr: (P3) JDK-8323196: jdk/jfr/api/consumer/filestream/TestOrdered.java failed with "Events are not ordered! Reuse = false" (P4) JDK-8320916: jdk/jfr/event/gc/stacktrace/TestParallelMarkSweepAllocationPendingStackTrace.java failed with "OutOfMemoryError: GC overhead limit exceeded" (P4) JDK-8340969: jdk/jfr/startupargs/TestStartDuration.java should be marked as flagless (P4) JDK-8331153: JFR: Improve logging of jdk/jfr/api/consumer/filestream/TestOrdered.java (P5) JDK-8313710: jcmd: typo in the documentation of JFR.start and JFR.dump hotspot/jvmti: (P4) JDK-8317636: Improve heap walking API tests to verify correctness of field indexes (P4) JDK-8282314: nsk/jvmti/SuspendThread/suspendthrd003 may leak memory hotspot/other: (P4) JDK-8341722: Fix some warnings as errors when building on Linux with toolchain clang hotspot/runtime: (P2) JDK-8325937: runtime/handshake/HandshakeDirectTest.java causes "monitor end should be strictly below the frame pointer" assertion failure on AArch64 (P2) JDK-8309171: Test vmTestbase/nsk/jvmti/scenarios/jni_interception/JI05/ji05t001/TestDescription.java fails after JDK-8308341 (P3) JDK-8308341: JNI_GetCreatedJavaVMs returns a partially initialized JVM (P3) JDK-8343599: Kmem limit and max values swapped when printing container information (P4) JDK-8319818: Address GCC 13.2.0 warnings (stringop-overflow and dangling-pointer) (P4) JDK-8327986: ASAN reports use-after-free in DirectivesParserTest.empty_object_vm (P4) JDK-8343129: Disable unstable check of ThreadsListHandle.sanity_vm ThreadList values (P4) JDK-8342607: Enhance register printing on x86_64 platforms (P4) JDK-8327098: GTest needs larger combination limit (P4) JDK-8276202: LogFileOutput.invalid_file_vm asserts when being executed from a read only working directory (P4) JDK-8344646: The libjsig deprecation warning should go to stderr not stdout (P4) JDK-8314752: Use google test string comparison macros (P4) JDK-8321818: vmTestbase/nsk/stress/strace/strace015.java failed with 'Cannot read the array length because "" is null' hotspot/svc: (P2) JDK-8314225: SIGSEGV in JavaThread::is_lock_owned (P4) JDK-8326525: com/sun/tools/attach/BasicTests.java does not verify AgentLoadException case hotspot/svc-agent: (P4) JDK-8294316: SA core file support is broken on macosx-x64 starting with macOS 12.x hotspot/test: (P1) JDK-8341412: Various test failures after JDK-8334305 (P4) JDK-8314610: hotspot can't compile with the latest of gtest because of (P4) JDK-8267893: Improve jtreg test failure handler do get native/mixed stack traces for cores and live processes (P4) JDK-8334305: Remove all code for nsk.share.Log verbose mode (P4) JDK-8330702: Update failure handler to don't generate Error message if cores actions are empty (P5) JDK-8332917: failure_handler should execute gdb "info threads" command on linux infrastructure/build: (P4) JDK-8349603: [21u, 17u, 11u] Update GHA JDKs after Jan/25 updates (P4) JDK-8336498: [macos] [build]: install-file macro may run into permission denied error (P4) JDK-8342988: GHA: Build JTReg in single step (P4) JDK-8341424: GHA: Collect hs_errs from build time failures (P4) JDK-8342704: GHA: Report truncation is broken after JDK-8341424 (P4) JDK-8342858: Make target mac-jdk-bundle fails on chmod command (P4) JDK-8320691: Timeout handler on Windows takes 2 hours to complete infrastructure/release_eng: (P4) JDK-8353905: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.15 (P4) JDK-8345371: Bump update version for OpenJDK: jdk-17.0.15 other-libs/other: (P4) JDK-8334490: Normalize string with locale invariant `toLowerCase()` security-libs/java.security: (P2) JDK-8320372: test/jdk/sun/security/x509/DNSName/LeadingPeriod.java validity check failed (P3) JDK-8311546: Certificate name constraints improperly validated with leading period (P3) JDK-8309740: Expand timeout windows for tests in JDK-8179502 (P3) JDK-8345414: Google CAInterop test failures (P3) JDK-8337826: Improve logging in OCSPTimeout and SimpleOCSPResponder to help diagnose JDK-8309754 (P3) JDK-8309841: Jarsigner should print a warning if an entry is removed (P3) JDK-8299994: java/security/Policy/Root/Root.java fails when home directory is read-only (P3) JDK-8292704: sun/security/tools/jarsigner/compatibility/Compatibility.java use wrong key size for EC (P3) JDK-8337951: Test sun/security/validator/samedn.sh CertificateNotYetValidException: NotBefore validation (P4) JDK-8335172: Add manual steps to run security/auth/callback/TextCallbackHandler/Password.java test (P4) JDK-8296818: Enhance JMH tests java/security/Signatures.java (P4) JDK-8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts (P4) JDK-8319673: Few security tests ignore VM flags (P4) JDK-8347424: Fix and rewrite sun/security/x509/DNSName/LeadingPeriod.java test (P4) JDK-8319648: java/lang/SecurityManager tests ignore vm flags (P4) JDK-8310629: java/security/cert/CertPathValidator/OCSP/OCSPTimeout.java fails with RuntimeException Server not ready (P4) JDK-8295087: Manual Test to Automated Test Conversion (P4) JDK-8302111: Serialization considerations (P4) JDK-8340116: test/jdk/sun/security/tools/jarsigner/PreserveRawManifestEntryAndDigest.java can fail due to regex (P5) JDK-8325024: java/security/cert/CertPathValidator/OCSP/OCSPTimeout.java incorrect comment information security-libs/javax.crypto: (P3) JDK-8296591: Signature benchmark (P4) JDK-8286779: javax.crypto.CryptoPolicyParser#isConsistent always returns 'true' security-libs/javax.crypto:pkcs11: (P3) JDK-8293345: SunPKCS11 provider checks on PKCS11 Mechanism are problematic (P3) JDK-8342270: Test sun/security/pkcs11/Provider/RequiredMechCheck.java needs write access to src tree (P4) JDK-8331959: Update PKCS#11 Cryptographic Token Interface to v3.1 security-libs/javax.net.ssl: (P3) JDK-8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs (P4) JDK-8339261: Logs truncated in test javax/net/ssl/DTLS/DTLSRehandshakeTest.java (P4) JDK-8339356: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java failed with java.net.SocketException: An established connection was aborted by the software in your host machine security-libs/jdk.security: (P3) JDK-8281234: The -protected option is not always checked in keytool and jarsigner (P4) JDK-8293412: Remove unnecessary java.security.egd overrides tools/jar: (P4) JDK-8339810: Clean up the code in sun.tools.jar.Main to properly close resources and use ZipFile during extract tools/javac: (P3) JDK-8295176: some langtools test pollutes source tree (P4) JDK-8343882: BasicAnnoTests doesn't handle multiple annotations at the same position (P4) JDK-8336942: Improve test coverage for class loading elements with annotations of different retentions (P4) JDK-8333427: langtools/tools/javac/newlines/NewLineTest.java is failing on Japanese Windows tools/javadoc(tool): (P3) JDK-8314975: JavadocTester should set source path if not specified (P4) JDK-8325529: Remove unused imports from `ModuleGenerator` test file (P4) JDK-8346908: Update JDK 17 javadoc man page tools/jpackage: (P3) JDK-8343100: Consolidate EmptyFolderTest and EmptyFolderPackageTest jpackage tests into single java file (P3) JDK-8343178: Test BasicTest.java javac compile fails cannot find symbol (P4) JDK-8342609: jpackage test helper function incorrectly removes a directory instead of its contents only (P4) JDK-8290400: Must run exe installers in jpackage jtreg tests without UI (P4) JDK-8343101: Rework BasicTest.testTemp test cases (P4) JDK-8314909: tools/jpackage/windows/Win8282351Test.java fails with java.lang.AssertionError: Expected [0]. Actual [1618]: tools/jshell: (P4) JDK-8327476: Upgrade JLine to 3.26.1