RELEASE NOTES FOR: 21.0.5 ==================================================================================================== Notes generated: Fri Oct 11 06:29:31 CEST 2024 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/javax.net.ssl: JDK-8337664: Distrust TLS Server Certificates Anchored by Entrust Root Certificates and Issued After Nov 11, 2024 The JDK will stop trusting TLS server certificates issued after November 11, 2024 and anchored by Entrust root certificates, in line with similar plans recently announced by Google and Mozilla. The list of affected certificates includes certificates branded as AffirmTrust, which are managed by Entrust. TLS server certificates issued on or before November 11, 2024 will continue to be trusted until they expire. Certificates issued after that date, and anchored by any of the Certificate Authorities in the table below, will be rejected. The restrictions will be enforced in the JDK implementation (the SunJSSE Provider) of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server's certificate chain is anchored by any of the Certificate Authorities in the table below and the certificate has been issued after November 11, 2024. An application will receive an Exception with a message indicating the trust anchor is not trusted, for example: ``` TLS server certificate issued after 2024-11-11 and anchored by a distrusted legacy Entrust root CA: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net ``` If necessary, and at your own risk, you can work around the restrictions by removing "ENTRUST_TLS" from the `jdk.security.caDistrustPolicies` security property in the `java.security` configuration file. The restrictions are imposed on the following Entrust Root certificates included in the JDK:
Root Certificates distrusted after 2024-11-11
Distinguished Name SHA-256 Fingerprint
CN=Entrust Root Certification Authority, OU=(c) 2006 Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, O=Entrust, Inc., C=US

73:C1:76:43:4F:1B:C6:D5:AD:F4:5B:0E:76:E7:27:28:7C:8D:E5:76:16:C1:E6:E6:14:1A:2B:2C:BC:7D:8E:4C

CN=Entrust Root Certification Authority - EC1, OU=(c) 2012 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

02:ED:0E:B2:8C:14:DA:45:16:5C:56:67:91:70:0D:64:51:D7:FB:56:F0:B2:AB:1D:3B:8E:B0:70:E5:6E:DF:F5

CN=Entrust Root Certification Authority - G2, OU=(c) 2009 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

43:DF:57:74:B0:3E:7F:EF:5F:E4:0D:93:1A:7B:ED:F1:BB:2E:6B:42:73:8C:4E:6D:38:41:10:3D:3A:A7:F3:39

CN=Entrust Root Certification Authority - G4, OU=(c) 2015 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

DB:35:17:D1:F6:73:2A:2D:5A:B9:7C:53:3E:C7:07:79:EE:32:70:A6:2F:B4:AC:42:38:37:24:60:E6:F0:1E:88

CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net

6D:C4:71:72:E0:1C:BC:B0:BF:62:58:0D:89:5F:E2:B8:AC:9A:D4:F8:73:80:1E:0C:10:B9:C8:37:D2:1E:B1:77

CN=AffirmTrust Commercial, O=AffirmTrust, C=US

03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7

CN=AffirmTrust Networking, O=AffirmTrust, C=US

0A:81:EC:5A:92:97:77:F1:45:90:4A:F3:8D:5D:50:9F:66:B5:E2:C5:8F:CD:B5:31:05:8B:0E:17:F3:F0B4:1B

CN=AffirmTrust Premium, O=AffirmTrust, C=US

70:A7:3F:7F:37:6B:60:07:42:48:90:45:34:B1:14:82:D5:BF:0E:69:8E:CC:49:8D:F5:25:77:EB:F2:E9:3B:9A

CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US

BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23

You can also use the `keytool` utility from the JDK to print out details of the certificate chain, as follows: keytool -v -list -alias -keystore If any of the certificates in the chain are issued by one of the root CAs in the table above are listed in the output you will need to update the certificate or contact the organization that manages the server. JDK-8341059: Distrust TLS Server Certificates Anchored by Entrust Root Certificates and Issued After Nov 11, 2024 The JDK will stop trusting TLS server certificates issued after November 11, 2024 and anchored by Entrust root certificates, in line with similar plans recently announced by Google and Mozilla. The list of affected certificates includes certificates branded as AffirmTrust, which are managed by Entrust. TLS server certificates issued on or before November 11, 2024 will continue to be trusted until they expire. Certificates issued after that date, and anchored by any of the Certificate Authorities in the table below, will be rejected. The restrictions will be enforced in the JDK implementation (the SunJSSE Provider) of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server's certificate chain is anchored by any of the Certificate Authorities in the table below and the certificate has been issued after November 11, 2024. An application will receive an Exception with a message indicating the trust anchor is not trusted, for example: ``` TLS server certificate issued after 2024-11-11 and anchored by a distrusted legacy Entrust root CA: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net ``` If necessary, and at your own risk, you can work around the restrictions by removing "ENTRUST_TLS" from the `jdk.security.caDistrustPolicies` security property in the `java.security` configuration file. The restrictions are imposed on the following Entrust Root certificates included in the JDK:
Root Certificates distrusted after 2024-11-11
Distinguished Name SHA-256 Fingerprint
CN=Entrust Root Certification Authority, OU=(c) 2006 Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, O=Entrust, Inc., C=US

73:C1:76:43:4F:1B:C6:D5:AD:F4:5B:0E:76:E7:27:28:7C:8D:E5:76:16:C1:E6:E6:14:1A:2B:2C:BC:7D:8E:4C

CN=Entrust Root Certification Authority - EC1, OU=(c) 2012 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

02:ED:0E:B2:8C:14:DA:45:16:5C:56:67:91:70:0D:64:51:D7:FB:56:F0:B2:AB:1D:3B:8E:B0:70:E5:6E:DF:F5

CN=Entrust Root Certification Authority - G2, OU=(c) 2009 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

43:DF:57:74:B0:3E:7F:EF:5F:E4:0D:93:1A:7B:ED:F1:BB:2E:6B:42:73:8C:4E:6D:38:41:10:3D:3A:A7:F3:39

CN=Entrust Root Certification Authority - G4, OU=(c) 2015 Entrust, Inc. - for authorized use only, OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

DB:35:17:D1:F6:73:2A:2D:5A:B9:7C:53:3E:C7:07:79:EE:32:70:A6:2F:B4:AC:42:38:37:24:60:E6:F0:1E:88

CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net

6D:C4:71:72:E0:1C:BC:B0:BF:62:58:0D:89:5F:E2:B8:AC:9A:D4:F8:73:80:1E:0C:10:B9:C8:37:D2:1E:B1:77

CN=AffirmTrust Commercial, O=AffirmTrust, C=US

03:76:AB:1D:54:C5:F9:80:3C:E4:B2:E2:01:A0:EE:7E:EF:7B:57:B6:36:E8:A9:3C:9B:8D:48:60:C9:6F:5F:A7

CN=AffirmTrust Networking, O=AffirmTrust, C=US

0A:81:EC:5A:92:97:77:F1:45:90:4A:F3:8D:5D:50:9F:66:B5:E2:C5:8F:CD:B5:31:05:8B:0E:17:F3:F0B4:1B

CN=AffirmTrust Premium, O=AffirmTrust, C=US

70:A7:3F:7F:37:6B:60:07:42:48:90:45:34:B1:14:82:D5:BF:0E:69:8E:CC:49:8D:F5:25:77:EB:F2:E9:3B:9A

CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US

BD:71:FD:F6:DA:97:E4:CF:62:D1:64:7A:DD:25:81:B0:7D:79:AD:F8:39:7E:B4:EC:BA:9C:5E:84:88:82:14:23

You can also use the `keytool` utility from the JDK to print out details of the certificate chain, as follows: keytool -v -list -alias -keystore If any of the certificates in the chain are issued by one of the root CAs in the table above are listed in the output you will need to update the certificate or contact the organization that manages the server. security-libs/javax.crypto: JDK-8322971: KEM.getInstance() Should Check If a Third-Party Security Provider Is Signed When instantiating a third-party security provider's implementation (class) of a `KEM` algorithm, the framework will determine the provider's codebase (JAR file) and verify its signature. In this way, JCA authenticates the provider and ensures that only providers signed by a trusted entity can be plugged into the JCA. This is consistent with other JCE service classes, such as `Cipher`, `Mac`, `KeyAgreement`, and others. tools/launcher: JDK-8310201: Available Locales Information Now Listed with -XshowSettings:locale Option The `showSettings` launcher option no longer prints available locales information by default, when `-XshowSettings` is used. The `-XshowSettings:locale` option will continue to print all settings related to available locales. security-libs/java.security: JDK-8341057: Added SSL.com TLS Root CA Certificates Issued in 2022 The following root certificates have been added to the cacerts truststore: ``` + SSL.com + ssltlsrootecc2022 DN: CN=SSL.com TLS ECC Root CA 2022, O=SSL Corporation, C=US + SSL.com + ssltlsrootrsa2022 DN: CN=SSL.com TLS RSA Root CA 2022, O=SSL Corporation, C=US ``` JDK-8051959: Thread and Timestamp Options for java.security.debug System Property The `java.security.debug` system property now accepts arguments which add thread ID, thread name, caller information, and timestamp information to debug statements for all components or a specific component. `+timestamp` can be appended to debug options to print a timestamp for that debug option. `+thread` can be appended to debug options to print thread and caller information for that debug option. Examples: `-Djava.security.debug=all+timestamp+thread` adds timestamp and thread information to every debug statement generated. `-Djava.security.debug=properties+timestamp` adds timestamp information to every debug statement generated for the `properties` component. You can also specify `-Djava.security.debug=help` which will display a complete list of supported components and arguments. See [Printing Thread and Timestamp Information](https://docs.oracle.com/en/java/javase/23/security/troubleshooting-security.html#GUID-EDB76EF1-D4B2-4D32-83C1-554129526FB4) for more information. JDK-8051959: Thread and Timestamp Options for java.security.debug System Property The `java.security.debug` system property now accepts arguments which add thread ID, thread name, caller information, and timestamp information to debug statements for all components or a specific component. `+timestamp` can be appended to debug options to print a timestamp for that debug option. `+thread` can be appended to debug options to print thread and caller information for that debug option. Examples: `-Djava.security.debug=all+timestamp+thread` adds timestamp and thread information to every debug statement generated. `-Djava.security.debug=properties+timestamp` adds timestamp information to every debug statement generated for the `properties` component. You can also specify `-Djava.security.debug=help` which will display a complete list of supported components and arguments. See [Printing Thread and Timestamp Information](https://docs.oracle.com/en/java/javase/17/security/troubleshooting-security.html#GUID-EDB76EF1-D4B2-4D32-83C1-554129526FB4) for more information. JDK-8051959: Thread and Timestamp Options for java.security.debug System Property The `java.security.debug` system property now accepts arguments which add thread ID, thread name, caller information, and timestamp information to debug statements for all components or a specific component. `+timestamp` can be appended to debug options to print a timestamp for that debug option. `+thread` can be appended to debug options to print thread and caller information for that debug option. Examples: `-Djava.security.debug=all+timestamp+thread` adds timestamp and thread information to every debug statement generated. `-Djava.security.debug=properties+timestamp` adds timestamp information to every debug statement generated for the `properties` component. You can also specify `-Djava.security.debug=help` which will display a complete list of supported components and arguments. See [Printing Thread and Timestamp Information](https://docs.oracle.com/en/java/javase/21/security/troubleshooting-security.html#GUID-EDB76EF1-D4B2-4D32-83C1-554129526FB4) for more information. core-svc/java.lang.management: JDK-8338139: The ClassLoadingMXBean and MemoryMXBean isVerbose Methods Are Now Consistent with Their setVerbose Methods The `ClassLoadingMXBean::setVerbose(boolean enabled)` method will set `class+load*` logging on log output `stdout` to level `info` if `enabled` is true, and to level `off` otherwise. In contrast, the `isVerbose` method would check if exactly `class+load` logging was enabled at the `info` level on _any_ log output. This could result in counter-intuitive behavior when logging `class+load=info` to a file via the command-line, as it caused `isVerbose` to return true, even after a call to `setVerbose(false)` had been made. A similar problem existed for the `MemoryMXBean::isVerbose` method. Starting with this release, the behavior is as follows: - `ClassLoadingMXBean::isVerbose` will return true only if `class+load*` logging (note the wildcard use) has been enabled at the `info` level (or above) on the `stdout` log output. - `MemoryMXBean::isVerbose` will return true only if `gc` logging has been enabled at the `info` level (or above) on the `stdout` log output. ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs: (P2) JDK-8331605: jdk/test/lib/TestMutuallyExclusivePlatformPredicates.java test failure (P4) JDK-8328110: Allow simultaneous use of PassFailJFrame with split UI and additional windows (P4) JDK-8308286: Fix clang warnings in linux code (P4) JDK-8327401: Some jtreg tests fail on Wayland without any tracking bug (P4) JDK-8294148: Support JSplitPane for instructions and test UI client-libs/2d: (P3) JDK-8311666: Disabled tests in test/jdk/sun/java2d/marlin (P3) JDK-8328896: Fontmetrics for large Fonts has zero width (P4) JDK-8331746: Create a test to verify that the cmm id is not ignored (P4) JDK-8334123: log the opening of Type 1 fonts (P4) JDK-8324808: Manual printer tests have no Pass/Fail buttons, instructions close set 3 (P4) JDK-8320608: Many jtreg printing tests are missing the @printer keyword (P4) JDK-8320675: PrinterJob/SecurityDialogTest.java hangs (P4) JDK-8320079: The ArabicBox.java test has no control buttons (P4) JDK-8333277: ubsan: mlib_ImageScanPoly.c:292:43: runtime error: division by zero client-libs/java.awt: (P3) JDK-8317288: [macos] java/awt/Window/Grab/GrabTest.java: Press on the outside area didn't cause ungrab (P3) JDK-8321176: [Screencast] make a second attempt on screencast failure (P3) JDK-8280988: [XWayland] Click on title to request focus test failures (P3) JDK-8331011: [XWayland] TokenStorage fails under Security Manager (P3) JDK-8280990: [XWayland] XTest emulated mouse click does not bring window to front (P3) JDK-8313697: [XWayland][Screencast] consequent getPixelColor calls are slow (P3) JDK-8309621: [XWayland][Screencast] screen capture failure with sun.java2d.uiScale other than 1 (P3) JDK-8305825: getBounds API returns wrong value resulting in multiple Regression Test Failures on Ubuntu 23.04 (P3) JDK-8328999: Update GIFlib to 5.2.2 (P3) JDK-8329004: Update Libpng to 1.6.43 (P4) JDK-8260633: [macos] java/awt/dnd/MouseEventAfterStartDragTest/MouseEventAfterStartDragTest.html test failed (P4) JDK-8310334: [XWayland][Screencast] screen capture error message in debug (P4) JDK-8317112: Add screenshot for Frame/DefaultSizeTest.java (P4) JDK-8320655: awt screencast robot spin and sync issues with native libpipewire api (P4) JDK-8328642: Convert applet test MouseDraggedOutCauseScrollingTest.html to main (P4) JDK-8328158: Convert java/awt/Choice/NonFocusablePopupMenuTest to automatic main test (P4) JDK-8328115: Convert java/awt/font/TextLayout/TestJustification.html applet test to main (P4) JDK-8328011: Convert java/awt/Frame/GetBoundsResizeTest/GetBoundsResizeTest.java applet test to main (P4) JDK-8328218: Delete test java/awt/Window/FindOwner/FindOwner.html (P4) JDK-8328560: java/awt/event/MouseEvent/ClickDuringKeypress/ClickDuringKeypress.java imports Applet (P4) JDK-8280392: java/awt/Focus/NonFocusableWindowTest/NonfocusableOwnerTest.java failed with "RuntimeException: Test failed." (P4) JDK-8328269: NonFocusablePopupMenuTest.java should be marked as headful (P4) JDK-8316389: Open source few AWT applet tests (P4) JDK-8316240: Open source several add/remove MenuBar manual tests (P4) JDK-8316211: Open source several manual applet tests (P4) JDK-8315965: Open source various AWT applet tests (P4) JDK-8312111: open/test/jdk/java/awt/Robot/ModifierRobotKey/ModifierRobotKeyTest.java fails on ubuntu 23.04 (P4) JDK-8328697: SubMenuShowTest and SwallowKeyEvents tests stabilization (P4) JDK-8328561: test java/awt/Robot/ManualInstructions/ManualInstructions.java isn't used client-libs/javax.accessibility: (P3) JDK-8329667: [macos] Issue with JTree related fix for JDK-8317771 client-libs/javax.imageio: (P4) JDK-6355567: AdobeMarkerSegment causes failure to read valid JPEG client-libs/javax.swing: (P2) JDK-8335967: "text-decoration: none" does not work with "A" HTML tags (P2) JDK-8331999: BasicDirectoryModel/LoaderThreadCount.java frequently fails on Windows in CI (P3) JDK-8323801: tag doesn't strikethrough the text (P3) JDK-8327007: javax/swing/JSpinner/8008657/bug8008657.java fails (P3) JDK-8328953: JEditorPane.read throws ChangedCharSetException (P3) JDK-8331495: Limit BasicDirectoryModel/LoaderThreadCount.java to Windows only (P3) JDK-8332431: NullPointerException in JTable of SwingSet2 (P3) JDK-8325179: Race in BasicDirectoryModel.validateFileCache (P3) JDK-6967482: TAB-key does not work in JTables after selecting details-view in JFileChooser (P3) JDK-8326734: text-decoration applied to lost when mixed with or (P4) JDK-8323670: A few client tests intermittently throw ConcurrentModificationException (P4) JDK-8327137: Add test for ConcurrentModificationException in BasicDirectoryModel (P4) JDK-8331142: Add test for number of loader threads in BasicDirectoryModel (P4) JDK-8327840: Automate javax/swing/border/Test4129681.java (P4) JDK-8238169: BasicDirectoryModel getDirectories and DoChangeContents.run can deadlock (P4) JDK-8328238: Convert few closed manual applet tests to main (P4) JDK-8327787: Convert javax/swing/border/Test4129681.java applet test to main (P4) JDK-8166352: FilePane.createDetailsView() removes JTable TAB, SHIFT-TAB functionality (P4) JDK-8325620: HTMLReader uses ConvertAction instead of specified CharacterAction for , , (P4) JDK-8310072: JComboBox/DisabledComboBoxFontTestAuto: Enabled and disabled ComboBox does not match in these LAFs: GTK+ (P4) JDK-8316306: Open source and convert manual Swing test (P4) JDK-8315804: Open source several Swing JTabbedPane JTextArea JTextField tests (P4) JDK-8316104: Open source several Swing SplitPane and RadioButton related tests (P4) JDK-8316285: Opensource JButton manual tests (P4) JDK-8307193: Several Swing jtreg tests use class.forName on L&F classes (P4) JDK-8329559: Test javax/swing/JFrame/bug4419914.java failed because The End and Start buttons are not placed correctly and Tab focus does not move as expected (P4) JDK-8305072: Win32ShellFolder2.compareTo is inconsistent core-libs: (P3) JDK-8334339: Test java/nio/file/attribute/BasicFileAttributeView/CreationTime.java fails on alinux3 (P4) JDK-8317696: Fix compilation with clang-16 (P4) JDK-8332589: ubsan: unix/native/libjava/ProcessImpl_md.c:562:5: runtime error: null pointer passed as argument 2, which is declared to never be null core-libs/java.io: (P4) JDK-8330748: ByteArrayOutputStream.writeTo(OutputStream) pins carrier core-libs/java.io:serialization: (P4) JDK-8222884: ConcurrentClassDescLookup.java times out intermittently core-libs/java.lang: (P4) JDK-8323782: Race: Thread::interrupt vs. AbstractInterruptibleChannel.begin (P4) JDK-8311989: Test java/lang/Thread/virtual/Reflection.java timed out core-libs/java.lang.foreign: (P4) JDK-8323552: AbstractMemorySegmentImpl#mismatch returns -1 when comparing distinct areas of the same instance of MemorySegment core-libs/java.lang.invoke: (P4) JDK-8335150: Test LogGeneratedClassesTest.java fails on rpmbuild mock enviroment core-libs/java.net: (P3) JDK-8299058: AssertionError in sun.net.httpserver.ServerImpl when connection is idle (P3) JDK-8333804: java/net/httpclient/ForbiddenHeadTest.java threw an exception with 0 failures (P4) JDK-8211854: [aix] java/net/ServerSocket/AcceptInheritHandle.java fails: read times out (P4) JDK-8330814: Cleanups for KeepAliveCache tests (P4) JDK-8331063: Some HttpClient tests don't report leaks (P4) JDK-8299487: Test java/net/httpclient/whitebox/SSLTubeTestDriver.java timed out (P4) JDK-8334600: TEST java/net/MulticastSocket/IPMulticastIF.java fails on linux-aarch64 core-libs/java.nio: (P3) JDK-8325382: (fc) FileChannel.transferTo throws IOException when position equals size (P3) JDK-8338696: (fs) BasicFileAttributes.creationTime() falls back to epoch if birth time is unavailable (Linux) (P3) JDK-8317128: java/nio/file/Files/CopyAndMove.java failed with AccessDeniedException (P3) JDK-8269657: Test java/nio/channels/DatagramChannel/Loopback.java failed: Unexpected message (P4) JDK-8332248: (fc) java/nio/channels/FileChannel/BlockDeviceSize.java failed with RuntimeException (P4) JDK-8313674: (fc) java/nio/channels/FileChannel/BlockDeviceSize.java should test for more block devices (P4) JDK-8073061: (fs) Files.copy(foo, bar, REPLACE_EXISTING) deletes bar even if foo is not readable (P4) JDK-8334297: (so) java/nio/channels/SocketChannel/OpenLeak.java should not depend on SecurityManager (P4) JDK-8339869: [21u] Test CreationTime.java fails with UnsatisfiedLinkError after 8334339 (P4) JDK-8299813: java/nio/channels/DatagramChannel/Disconnect.java fails with jtreg test timeout due to lost datagram (P4) JDK-8322881: java/nio/file/Files/CopyMoveVariations.java fails with AccessDeniedException due to permissions of files in /tmp (P4) JDK-8327650: Test java/nio/channels/DatagramChannel/StressNativeSignal.java timed out (P4) JDK-8337038: Test java/nio/file/attribute/BasicFileAttributeView/CreationTime.java shoud set as /native (P4) JDK-8336301: test/jdk/java/nio/channels/AsyncCloseAndInterrupt.java leaves around a FIFO file upon test completion core-libs/java.nio.charsets: (P4) JDK-8319817: Charset constructor should make defensive copy of aliases (P4) JDK-8310683: Refactor StandardCharset/standard.java to use JUnit core-libs/java.text: (P4) JDK-8333462: Performance regression of new DecimalFormat() when compare to jdk11 (P4) JDK-8317372: Refactor some NumberFormat tests to use JUnit core-libs/java.util: (P4) JDK-8336926: jdk/internal/util/ReferencedKeyTest.java can fail with ConcurrentModificationException core-libs/java.util.concurrent: (P3) JDK-8332154: Memory leak in SynchronousQueue (P3) JDK-8328366: Thread.setContextClassloader from thread in FJP commonPool task no longer works after JDK-8327501 (P4) JDK-8327501: Common ForkJoinPool prevents class unloading in some cases (P4) JDK-8325754: Dead AbstractQueuedSynchronizer$ConditionNodes survive minor garbage collections (P4) JDK-8269428: java/util/concurrent/ConcurrentHashMap/ToArray.java timed out (P4) JDK-8314515: java/util/concurrent/SynchronousQueue/Fairness.java failed with "Error: fair=false i=8 j=0" core-libs/java.util.jar: (P4) JDK-8303920: Avoid calling out to python in DataDescriptorSignatureMissing test (P4) JDK-8332490: JMH org.openjdk.bench.java.util.zip.InflaterInputStreams.inflaterInputStreamRead OOM (P4) JDK-8333398: Uncomment the commented test in test/jdk/java/util/jar/JarFile/mrjar/MultiReleaseJarAPI.java (P5) JDK-7022325: TEST_BUG: test/java/util/zip/ZipFile/ReadLongZipFileName.java leaks files if it fails core-libs/java.util.logging: (P4) JDK-8333270: HandlersOnComplexResetUpdate and HandlersOnComplexUpdate tests fail with "Unexpected reference" if timeoutFactor is less than 1/3 core-libs/java.util:i18n: (P3) JDK-8334653: ISO 4217 Amendment 177 Update (P3) JDK-8334418: Update IANA Language Subtag Registry to Version 2024-06-14 (P4) JDK-8321206: Make Locale related system properties `StaticProperty` (P4) JDK-8334333: MissingResourceCauseTestRun.java fails if run by root (P4) JDK-8332174: Remove 2 (unpaired) RLO Unicode characters in ff_Adlm.xml (P4) JDK-8332424: Update IANA Language Subtag Registry to Version 2024-05-16 core-svc/debugger: (P3) JDK-8324668: JDWP process management needs more efficient file descriptor handling (P3) JDK-8335134: Test com/sun/jdi/BreakpointOnClassPrepare.java timeout (P4) JDK-8307778: com/sun/jdi/cds tests fail with jtreg's Virtual test thread factory (P4) JDK-8322062: com/sun/jdi/JdwpAllowTest.java does not performs negative testing with prefix length core-svc/java.lang.management: (P1) JDK-8338139: {ClassLoading,Memory}MXBean::isVerbose methods are inconsistent with their setVerbose methods (P4) JDK-8310628: GcInfoBuilder.c missing JNI Exception checks core-svc/javax.management: (P4) JDK-8328273: sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java failed with java.rmi.server.ExportException: Port already in use (P4) JDK-8311306: Test com/sun/management/ThreadMXBean/ThreadCpuTimeArray.java failed: out of expected range hotspot/compiler: (P2) JDK-8323274: C2: array load may float above range check (P2) JDK-8332920: C2: Partial Peeling is wrongly applied for CmpU with negative limit (P2) JDK-8322726: C2: Unloaded signature class kills argument value (P2) JDK-8324983: Race in CompileBroker::possibly_add_compiler_threads (P2) JDK-8329258: TailCall should not use frame pointer register for jump target (P3) JDK-8330611: AES-CTR vector intrinsic may read out of bounds (x86_64, AVX-512) (P3) JDK-8334421: assert(!oldbox->is_unbalanced()) failed: this should not be called for unbalanced region (P3) JDK-8324174: assert(m->is_entered(current)) failed: invariant (P3) JDK-8322996: BoxLockNode creation fails with assert(reg < CHUNK_SIZE) failed: sanity (P3) JDK-8319793: C2 compilation fails with "Bad graph detected in build_loop_late" after JDK-8279888 (P3) JDK-8323972: C2 compilation fails with assert(!x->as_Loop()->is_loop_nest_inner_loop()) failed: loop was transformed (P3) JDK-8308660: C2 compilation hits 'node must be dead' assert (P3) JDK-8316756: C2 EA fails with "missing memory path" when encountering unsafe_arraycopy stub call (P3) JDK-8327423: C2 remove_main_post_loops: check if main-loop belongs to pre-loop, not just assert (P3) JDK-8332905: C2 SuperWord: bad AD file, with RotateRightV and first operand not a pack (P3) JDK-8330819: C2 SuperWord: bad dominance after pre-loop limit adjustment with base that has CastLL after pre-loop (P3) JDK-8325494: C2: Broken graph after not skipping CastII node anymore for Assertion Predicates after JDK-8309902 (P3) JDK-8333366: C2: CmpU3Nodes are not pushed back to worklist in PhaseCCP leading to non-fixpoint assertion failure (P3) JDK-8331575: C2: crash when ConvL2I is split thru phi at LongCountedLoop (P3) JDK-8323682: C2: guard check is not generated in Arrays.copyOfRange intrinsic when allocation is eliminated by EA (P3) JDK-8331885: C2: meet between unloaded and speculative types is not symmetric (P3) JDK-8321278: C2: Partial peeling fails with assert "last_peel <- first_not_peeled" (P3) JDK-8324969: C2: prevent elimination of unbalanced coarsened locking regions (P3) JDK-8322743: C2: prevent lock region elimination in OSR compilation (P3) JDK-8332959: C2: ZGC fails with 'Incorrect load shift' when invoking Object.clone() reflectively on an array (P3) JDK-8331863: DUIterator_Fast used before it is constructed (P3) JDK-8321509: False positive in get_trampoline fast path causes crash (P3) JDK-8325083: jdk/incubator/vector/Double512VectorTests.java crashes in Assembler::vex_prefix_and_encode (P3) JDK-8333099: Missing check for is_LoadVector in StoreNode::Identity (P3) JDK-8329126: No native wrappers generated anymore with -XX:-TieredCompilation after JDK-8251462 (P3) JDK-8317299: safepoint scalarization doesn't keep track of the depth of the JVM state (P3) JDK-8325520: Vector loads and stores with indices and masks incorrectly compiled (P4) JDK-8280120: [IR Framework] Add attribute to @IR to enable/disable IR matching based on the architecture (P4) JDK-8324641: [IR Framework] Add Setup method to provide custom arguments and set fields (P4) JDK-8287325: AArch64: fix virtual threads with -XX:UseBranchProtection=pac-ret (P4) JDK-8307352: AARCH64: Improve itable_stub (P4) JDK-8323122: AArch64: Increase itable stub size estimate (P4) JDK-8323584: AArch64: Unnecessary ResourceMark in NativeCall::set_destination_mt_safe (P4) JDK-8334867: Add back assertion from JDK-8325494 (P4) JDK-8323577: C2 SuperWord: remove AlignVector restrictions on IR tests added in JDK-8305055 (P4) JDK-8316361: C2: assert(!failure) failed: Missed optimization opportunity in PhaseIterGVN with -XX:VerifyIterativeGVN=10 (P4) JDK-8320379: C2: Sort spilling/unspilling sequence for better ld/st merging into ldp/stp on AArch64 (P4) JDK-8317738: CodeCacheFullCountTest failed with "VirtualMachineError: Out of space in CodeCache for method handle intrinsic" (P4) JDK-8317831: compiler/codecache/CheckLargePages.java fails on OL 8.8 with unexpected memory string (P4) JDK-8315576: compiler/codecache/CodeCacheFullCountTest.java fails after JDK-8314837 (P4) JDK-8315969: compiler/rangechecks/TestRangeCheckHoistingScaledIV.java: make flagless (P4) JDK-8309894: compiler/vectorapi/VectorLogicalOpIdentityTest.java fails on SVE system with UseSVE=0 (P4) JDK-8315505: CompileTask timestamp printed can overflow (P4) JDK-8291809: Convert compiler/c2/cr7200264/TestSSE2IntVect.java to IR verification test (P4) JDK-8321025: Enable Neoverse N1 optimizations for Neoverse V2 (P4) JDK-8312200: Fix Parse::catch_call_exceptions memory leak (P4) JDK-8332499: Gtest codestrings.validate_vm fail on linux x64 when hsdis is present (P4) JDK-8333652: RISC-V: compiler/vectorapi/VectorGatherMaskFoldingTest.java fails when using RVV (P4) JDK-8332904: ubsan ppc64le: c1_LIRGenerator_ppc.cpp:581:21: runtime error: signed integer overflow: 9223372036854775807 + 1 cannot be represented in type 'long int' (P4) JDK-8331854: ubsan: copy.hpp:218:10: runtime error: addition of unsigned offset to 0x7fc2b4024518 overflowed to 0x7fc2b4024510 (P4) JDK-8332903: ubsan: opto/output.cpp:1002:18: runtime error: load of value 171, which is not a valid value for type 'bool' (P4) JDK-8331731: ubsan: relocInfo.cpp:155:30: runtime error: applying non-zero offset to null pointer (P4) JDK-8333622: ubsan: relocInfo_x86.cpp:101:56: runtime error: pointer index expression with base (-1) overflowed (P4) JDK-8319406: x86: Shorter movptr(reg, imm) for 32-bit immediates (P5) JDK-8325542: CTW: Runner can produce negative StressSeed (P5) JDK-8335536: Fix assertion failure in IdealGraphPrinter when append is true (P5) JDK-8331518: Tests should not use the "Classpath" exception form of the legal header (P5) JDK-8315024: Vector API FP reduction tests should not test for exact equality (P5) JDK-8325037: x86: enable and fix hotspot/jtreg/compiler/vectorization/TestRoundVectFloat.java hotspot/gc: (P2) JDK-8283223: gc/stringdedup/TestStringDeduplicationFullGC.java#Parallel failed with "RuntimeException: String verification failed" (P2) JDK-8334594: Generational ZGC: Deadlock after OopMap rewrites in 8331572 (P2) JDK-8334482: Shenandoah: Deadlock when safepoint is pending during nmethods iteration (P2) JDK-8329088: Stack chunk thawing races with concurrent GC stack iteration (P2) JDK-8315031: YoungPLABSize and OldPLABSize not aligned by ObjectAlignmentInBytes (P3) JDK-8170817: G1: Returning MinTLABSize from unsafe_max_tlab_alloc causes TLAB flapping (P3) JDK-8325218: gc/parallel/TestAlwaysPreTouchBehavior.java fails (P3) JDK-8325587: Shenandoah: ShenandoahLock should allow blocking in VM (P3) JDK-8316328: Test jdk/jfr/event/oldobject/TestSanityDefault.java times out for some heap sizes (P3) JDK-8332936: Test vmTestbase/metaspace/gc/watermark_70_80/TestDescription.java fails with no GC's recorded (P3) JDK-8333088: ubsan: shenandoahAdaptiveHeuristics.cpp:245:44: runtime error: division by zero (P3) JDK-8332717: ZGC: Division by zero in heuristics (P3) JDK-8330981: ZGC: Should not dedup strings in the finalizer graph (P4) JDK-8331572: Allow using OopMapCache outside of STW GC phases (P4) JDK-8335493: check_gc_overhead_limit should reset SoftRefPolicy::_should_clear_all_soft_refs (P4) JDK-8326717: Disable stringop-overflow in shenandoahLock.cpp (P4) JDK-8324755: Enable parallelism in vmTestbase/gc/gctests/LargeObjects tests (P4) JDK-8322330: JavadocHelperTest.java OOMEs with Parallel GC and ZGC (P4) JDK-8325616: JFR ZGC Allocation Stall events should record stack traces (P4) JDK-8329134: Reconsider TLAB zapping (P4) JDK-8331798: Remove unused arg of checkErgonomics() in TestMaxHeapSizeTools.java (P4) JDK-8331573: Rename CollectedHeap::is_gc_active to be explicitly about STW GCs (P4) JDK-8328075: Shenandoah: Avoid forwarding when objects don't move in full-GC (P4) JDK-8333716: Shenandoah: Check for disarmed method before taking the nmethod lock (P4) JDK-8334769: Shenandoah: Move CodeCache_lock close to its use in ShenandoahConcurrentNMethodIterator (P4) JDK-8331405: Shenandoah: Optimize ShenandoahLock with TTAS (P4) JDK-8331411: Shenandoah: Reconsider spinning duration in ShenandoahLock (P4) JDK-8328647: TestGarbageCollectorMXBean.java fails with C1-only and -Xcomp (P4) JDK-8331771: ZGC: Remove OopMapCacheAlloc_lock ordering workaround (P4) JDK-8330576: ZYoungCompactionLimit should have range check (P5) JDK-8335904: Fix invalid comment in ShenandoahLock (P5) JDK-8333093: Incorrect comment in zAddress_aarch64.cpp hotspot/jfr: (P3) JDK-8323196: jdk/jfr/api/consumer/filestream/TestOrdered.java failed with "Events are not ordered! Reuse = false" (P3) JDK-8321220: JFR: RecordedClass reports incorrect modifiers (P3) JDK-8317360: Missing null checks in JfrCheckpointManager and JfrStringPool initialization routines (P3) JDK-8326106: Write and clear stack trace table outside of safepoint (P4) JDK-8327990: [macosx-aarch64] Various tests fail with -XX:+AssertWXAtThreadSync (P4) JDK-8316193: jdk/jfr/event/oldobject/TestListenerLeak.java java.lang.Exception: Could not find leak (P4) JDK-8331931: JFR: Avoid loading regex classes during startup (P4) JDK-8331153: JFR: Improve logging of jdk/jfr/api/consumer/filestream/TestOrdered.java (P4) JDK-8329995: Restricted access to `/proc` can cause JFR initialization to crash (P4) JDK-8332699: ubsan: jfrEventSetting.inline.hpp:31:43: runtime error: index 163 out of bounds for type 'jfrNativeEventSetting [162]' hotspot/jvmti: (P3) JDK-8333542: Breakpoint in parallel code does not work (P4) JDK-8330146: assert(!_thread->is_in_any_VTMS_transition()) failed (P4) JDK-8317635: Improve GetClassFields test to verify correctness of field order (P4) JDK-8335775: Remove extraneous 's' in comment of rawmonitor.cpp test file (P4) JDK-8333149: ubsan : memset on nullptr target detected in jvmtiEnvBase.cpp get_object_monitor_usage (P4) JDK-8333361: ubsan,test : libHeapMonitorTest.cpp:518:9: runtime error: null pointer passed as argument 2, which is declared to never be null (P4) JDK-8333178: ubsan: jvmti_tools.cpp:149:16: runtime error: null pointer passed as argument 2, which is declared to never be null hotspot/runtime: (P2) JDK-8335409: Can't allocate and retain memory from resource area in frame::oops_interpreted_do oop closure after 8329665 (P2) JDK-8332935: Crash: assert(*lastPtr != 0) failed: Mismatched JNINativeInterface tables, check for new entries (P2) JDK-8324781: runtime/Thread/TestAlwaysPreTouchStacks.java failed with Expected a higher ratio between stack committed and reserved (P3) JDK-8335283: Build failure due to 'no_sanitize' attribute directive ignored (P3) JDK-8325469: Freeze/Thaw code can crash in the presence of OSR frames (P3) JDK-8309067: gtest/AsyncLogGtest.java fails again in stderrOutput_vm (P4) JDK-8211847: [aix] java/lang/ProcessHandle/InfoTest.java fails: "reported cputime less than expected" (P4) JDK-8324577: [REDO] - [IMPROVE] OPEN_MAX is no longer the max limit on macOS >= 10.6 for RLIMIT_NOFILE (P4) JDK-8330849: Add test to verify memory usage with recursive locking (P4) JDK-8319818: Address GCC 13.2.0 warnings (stringop-overflow and dangling-pointer) (P4) JDK-8319773: Avoid inflating monitors when installing hash codes for LM_LIGHTWEIGHT (P4) JDK-8320212: Disable GCC stringop-overflow warning for affected files (P4) JDK-8322008: Exclude some CDS tests from running with -Xshare:off (P4) JDK-8329665: fatal error: memory leak: allocating without ResourceMark (P4) JDK-8309685: Fix -Wconversion warnings in assembler and register code (P4) JDK-8310906: Fix -Wconversion warnings in runtime, oops and some code header files. (P4) JDK-8330027: Identity hashes of archived objects must be based on a reproducible random seed (P4) JDK-8318071: IgnoreUnrecognizedVMOptions flag still causes failure in ArchiveHeapTestClass (P4) JDK-8337622: IllegalArgumentException in java.lang.reflect.Field.get (P4) JDK-8335007: Inline OopMapCache table (P4) JDK-8334239: Introduce macro for ubsan method/function exclusions (P4) JDK-8330520: linux clang build fails in os_linux.cpp with static_assert with no message is a C++17 extension (P4) JDK-8331714: Make OopMapCache installation lock-free (P4) JDK-8299790: os::print_hex_dump is racy (P4) JDK-8314163: os::print_hex_dump prints incorrectly for big endian platforms and unit sizes larger than 1 (P4) JDK-8315923: pretouch_memory by atomic-add-0 fragments huge pages unexpectedly (P4) JDK-8317240: Promptly free OopMapEntry after fail to insert the entry to OopMapCache (P4) JDK-8316131: runtime/cds/appcds/TestParallelGCWithCDS.java fails with JNI error (P4) JDK-8312049: runtime/logging/ClassLoadUnloadTest can be improved (P4) JDK-8324580: SIGFPE on THP initialization on kernels < 4.10 (P4) JDK-8310108: Skip ReplaceCriticalClassesForSubgraphs when EnableJVMCI is specified (P4) JDK-8321933: TestCDSVMCrash.java spawns two processes (P4) JDK-8332818: ubsan: archiveHeapLoader.cpp:70:27: runtime error: applying non-zero offset 18446744073707454464 to null pointer (P4) JDK-8333639: ubsan: cppVtables.cpp:81:55: runtime error: index 14 out of bounds for type 'long int [1]' (P4) JDK-8331789: ubsan: deoptimization.cpp:403:29: runtime error: load of value 208, which is not a valid value for type 'bool' (P4) JDK-8333354: ubsan: frame.inline.hpp:91:25: and src/hotspot/share/runtime/frame.inline.hpp:88:29: runtime error: member call on null pointer of type 'const struct SmallRegisterMap' (P4) JDK-8332473: ubsan: growableArray.hpp:290:10: runtime error: null pointer passed as argument 1, which is declared to never be null (P4) JDK-8332825: ubsan: guardedMemory.cpp:35:11: runtime error: null pointer passed as argument 2, which is declared to never be null (P4) JDK-8333363: ubsan: instanceKlass.cpp: runtime error: member call on null pointer of type 'struct AnnotationArray' (P4) JDK-8332720: ubsan: instanceKlass.cpp:3550:76: runtime error: member call on null pointer of type 'struct Array' (P4) JDK-8333887: ubsan: unsafe.cpp:247:13: runtime error: store to null pointer of type 'volatile int' (P4) JDK-8332894: ubsan: vmError.cpp:2090:26: runtime error: division by zero (P4) JDK-8331421: ubsan: vmreg.cpp checking error member call on misaligned address (P4) JDK-8335237: ubsan: vtableStubs.hpp is_vtable_stub exclude from ubsan checks (P4) JDK-8331626: unsafe.cpp:162:38: runtime error in index_oop_from_field_offset_long - applying non-zero offset 4563897424 to null pointer (P4) JDK-8307788: vmTestbase/gc/gctests/LargeObjects/large003/TestDescription.java timed out hotspot/svc: (P2) JDK-8314225: SIGSEGV in JavaThread::is_lock_owned (P4) JDK-8329103: assert(!thread->in_asgct()) failed during multi-mode profiling hotspot/svc-agent: (P4) JDK-8335743: jhsdb jstack cannot print some information on the waiting thread (P4) JDK-8336284: Test TestClhsdbJstackLock.java/TestJhsdbJstackLock.java fails with -Xcomp after JDK-8335743 (P5) JDK-8333353: Delete extra empty line in CodeBlob.java hotspot/test: (P4) JDK-8318605: Enable parallelism in vmTestbase/nsk/stress/stack tests (P4) JDK-8332898: failure_handler: log directory of commands (P4) JDK-8325763: Revert properties: vm.opt.x.* (P4) JDK-8334078: RISC-V: TestIntVect.java fails after JDK-8332153 when running without RVV (P4) JDK-8332113: Update nsk.share.Log to be always verbose (P5) JDK-8332885: Clarify failure_handler self-tests (P5) JDK-8328234: Remove unused nativeUtils files infrastructure: (P4) JDK-8334166: Enable binary check (P4) JDK-8332008: Enable issuestitle check (P4) JDK-8332675: test/hotspot/jtreg/gc/testlibrary/Helpers.java compileClass javadoc does not match after 8321812 infrastructure/build: (P4) JDK-8336343: Add more known sysroot library locations for ALSA (P4) JDK-8337283: configure.log is truncated when build dir is on different filesystem (P4) JDK-8331164: createJMHBundle.sh download jars fail when url needed to be redirected (P4) JDK-8319197: Exclude hb-subset and hb-style from compilation (P4) JDK-8336342: Fix known X11 library locations in sysroot (P4) JDK-8336928: GHA: Bundle artifacts removal broken (P4) JDK-8338286: GHA: Demote x86_32 to hotspot build only (P4) JDK-8334618: ubsan: support setting additional ubsan check options (P5) JDK-8333477: Delete extra empty spaces in Makefiles infrastructure/release_eng: (P4) JDK-8331266: Bump update version for OpenJDK: jdk-21.0.5 security-libs/java.security: (P2) JDK-8341057: Add 2 SSL.com TLS roots (P4) JDK-8318479: [jmh] the test security.CacheBench failed for multiple threads run (P4) JDK-8051959: Add thread and timestamp options to java.security.debug system property (P4) JDK-8322766: Micro bench SSLHandshake should use default algorithms security-libs/javax.crypto: (P3) JDK-8322971: KEM.getInstance() should check if a 3rd-party security provider is signed security-libs/javax.crypto:pkcs11: (P3) JDK-8261433: Better pkcs11 performance for libpkcs11:C_EncryptInit/libpkcs11:C_DecryptInit (P3) JDK-8328785: IOException: Symbol not found: C_GetInterface for PKCS11 interface prior to V3.0 (P3) JDK-8330133: libj2pkcs11.so crashes on some pkcs#11 v3.0 libraries security-libs/javax.net.ssl: (P2) JDK-8341059: Change Entrust TLS distrust date to November 12, 2024 (P3) JDK-8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs (P3) JDK-8325384: sun/security/ssl/SSLSessionImpl/ResumptionUpdateBoundValues.java failing intermittently when main thread is a virtual thread (P4) JDK-8241550: [macOS] SSLSocketImpl/ReuseAddr.java failed due to "BindException: Address already in use" (P4) JDK-8315422: getSoTimeout() would be in try block in SSLSocketImpl (P4) JDK-8325022: Incorrect error message on client authentication (P4) JDK-8332524: Instead of printing "TLSv1.3," it is showing "TLS13" (P4) JDK-8301686: TLS 1.3 handshake fails if server_name doesn't match resuming session tools: (P4) JDK-8331077: nroff man page update for jar tool tools/javac: (P3) JDK-8312229: Crash involving yield, switch and anonymous classes (P4) JDK-8326129: Java Record Pattern Match leads to infinite loop tools/javadoc(tool): (P3) JDK-8242564: javadoc crashes:: class cast exception com.sun.tools.javac.code.Symtab$6 (P3) JDK-8326332: Unclosed inline tags cause misalignment in summary tables (P3) JDK-8330063: Upgrade jQuery to 3.7.1 (P4) JDK-8334332: TestIOException.java fails if run by root tools/jlink: (P3) JDK-8313983: jmod create --target-platform should replace existing ModuleTarget attribute tools/jshell: (P2) JDK-8314614: jdk/jshell/ImportTest.java failed with "InternalError: Failed remote listen" (P4) JDK-8312140: jdk/jshell tests failed with JDI socket timeouts tools/launcher: (P3) JDK-8310201: Reduce verbose locale output in -XshowSettings launcher option xml/javax.xml.validation: (P4) JDK-8320602: Lock contention in SchemaDVFactory.getInstance()