RELEASE NOTES FOR: 21.0.7 ==================================================================================================== Notes generated: Fri Apr 18 06:28:46 CEST 2025 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/javax.net.ssl: JDK-8346587: Distrust TLS Server Certificates Anchored by Camerfirma Root Certificates and Issued After April 15, 2025 The JDK will stop trusting TLS server certificates issued after April 15, 2025 and anchored by Camerfirma root certificates, in line with similar plans announced by Google, Mozilla, Apple, and Microsoft. TLS server certificates issued on or before April 15, 2025 will continue to be trusted until they expire. Certificates issued after that date, and anchored by any of the Certificate Authorities in the table below, will be rejected. The restrictions are enforced in the JDK implementation (the `SunJSSE` Provider) of the Java Secure Socket Extension (JSSE) API. A TLS session will not be negotiated if the server's certificate chain is anchored by any of the Certificate Authorities in the table below and the certificate has been issued after April 15, 2025. An application will receive an exception with a message indicating the trust anchor is not trusted, for example: ``` "TLS Server certificate issued after 2025-04-15 and anchored by a distrusted legacy Camerfirma root CA: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU" ``` The JDK can be configured to trust these certificates again by removing "CAMERFIRMA_TLS" from the `jdk.security.caDistrustPolicies` security property in the `java.security` configuration file. The restrictions are imposed on the following Camerfirma Root certificates included in the JDK:
Root Certificates distrusted after 2025-04-15
Distinguished Name SHA-256 Fingerprint
CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU

0C:25:8A:12:A5:67:4A:EF:25:F2:8B:A7:DC:FA:EC:EE:A3:48:E5:41:E6:F5:CC:4E:E6:3B:71:B3:61:60:6A:C3
CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU

06:3E:4A:FA:C4:91:DF:D3:32:F3:08:9B:85:42:E9:46:17:D8:93:D7:FE:94:4E:10:A7:93:7E:E2:9D:96:93:C0
CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU

13:63:35:43:93:34:A7:69:80:16:A0:D3:24:DE:72:28:4E:07:9D:7B:52:20:BB:8F:BD:74:78:16:EE:BE:BA:CA
You can also use the `keytool` utility from the JDK to print out details of the certificate chain, as follows: keytool -v -list -alias -keystore If any of the certificates in the chain are issued by one of the root CAs in the table above are listed in the output you will need to update the certificate or contact the organization that manages the server. security-libs/javax.crypto:pkcs11: JDK-8293345: Legacy Mechanism Check in SunPKCS11 Provider Is Enhanced with Service Type Native PKCS11 mechanisms which support decryption but not encryption, or signature verification but not signing, are considered legacy and are disabled by default. The legacy mechanism check in SunPKCS11 provider is enhanced with the service type. For example, prior to this fix, a mechanism supporting encryption, decryption, and verification but not signing, is considered legacy and can't be used at all. After this fix, the corresponding Cipher service using this mechanism is available since both encryption and decryption are supported. However, the corresponding Signature service is not since only verification is supported. To bypass the legacy mechanism check, set the PKCS11 provider configuration attribute "allowLegacy" to true. The default value is false. Note that it is the caller's responsibility to make sure the legacy mechanism is not used for the unsupported functionality. security-libs/java.security: JDK-8309841: Jarsigner Should Print a Warning If an Entry Is Removed If an entry is removed from a signed JAR file, there is no mechanism to detect that it has been removed using the `JarFile` API, since the `getJarEntry` method returns `null` as if the entry had never existed. With this change, the `jarsigner -verify` command analyzes the signature files and if some sections do not have matching file entries, it prints out the following warning: "This JAR contains signed entries for files that do not exist". Users can further find out the names of these entries by adding the `-verbose` option to the command. ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs: (P4) JDK-8339524: Clean up a few ExtendedRobot tests (P4) JDK-8343128: PassFailJFrame.java test result: Error. Bad action for script: build} (P4) JDK-8283664: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PrintTextTest.java (P4) JDK-8345468: test/jdk/javax/swing/JScrollBar/4865918/bug4865918.java fails in ubuntu22.04 client-libs/2d: (P4) JDK-8277240: java/awt/Graphics2D/ScaledTransform/ScaledTransform.java dialog does not get disposed (P4) JDK-8320676: Manual printer tests have no Pass/Fail buttons, instructions close set 1 (P4) JDK-8324807: Manual printer tests have no Pass/Fail buttons, instructions close set 2 (P4) JDK-8340411: open source several 2D imaging tests (P4) JDK-8340078: Open source several 2D tests (P4) JDK-8339883: Open source several AWT/2D related tests client-libs/java.awt: (P1) JDK-8340480: Bad copyright notices in changes from JDK-8339902 (P2) JDK-8348625: [21u, 17u] Revert JDK-8185862 to restore old java.awt.headless behavior on Windows (P3) JDK-8335468: [XWayland] JavaFX hangs when calling java.awt.Robot.getPixelColor (P3) JDK-8332158: [XWayland] test/jdk/java/awt/Mouse/EnterExitEvents/ResizingFrameTest.java (P3) JDK-8348675: TrayIcon tests fail in Ubuntu 24.10 Wayland (P4) JDK-8313633: [macOS] java/awt/dnd/NextDropActionTest/NextDropActionTest.java fails with java.lang.RuntimeException: wrong next drop action! (P4) JDK-8198237: [macos] Test java/awt/Frame/ExceptionOnSetExtendedStateTest/ExceptionOnSetExtendedStateTest.java fails (P4) JDK-8329692: Add more details to FrameStateTest.java test instructions (P4) JDK-8328387: Convert java/awt/Frame/FrameStateTest/FrameStateTest.html applet test to main (P4) JDK-8328005: Convert java/awt/im/JTextFieldTest.java applet test to main (P4) JDK-8328185: Convert java/awt/image/MemoryLeakTest/MemoryLeakTest.java applet test to main (P4) JDK-8328368: Convert java/awt/image/multiresolution/MultiDisplayTest/MultiDisplayTest.java applet test to main (P4) JDK-8328730: Convert java/awt/print/bug8023392/bug8023392.html applet test to main (P4) JDK-8328370: Convert java/awt/print/Dialog/PrintApplet.java applet test to main (P4) JDK-8328719: Convert java/awt/print/PageFormat/SetOrient.html applet test to main (P4) JDK-8328827: Convert java/awt/print/PrinterJob/PrinterDialogsModalityTest/PrinterDialogsModalityTest.html applet test to main (P4) JDK-8329322: Convert PageFormat/Orient.java to use PassFailJFrame (P4) JDK-8329210: Delete Redundant Printer Dialog Modality Test (P4) JDK-8346887: DrawFocusRect() may cause an assertion failure (P4) JDK-8342541: Exclude List/KeyEventsTest/KeyEventsTest.java from running on macOS (P4) JDK-8339943: Frame not disposed in java/awt/dnd/DropActionChangeTest.java (P4) JDK-8337886: java/awt/Frame/MaximizeUndecoratedTest.java fails in OEL due to a slight color difference (P4) JDK-8340719: Open source AWT List tests (P4) JDK-8340687: Open source closed frame tests #1 (P4) JDK-8339902: Open source couple TextField related tests (P4) JDK-8328753: Open source few Undecorated Frame tests (P4) JDK-8341111: open source several AWT tests including menu shortcut tests (P4) JDK-8333360: PrintNullString.java doesn't use float arguments (P4) JDK-8329320: Simplify awt/print/PageFormat/NullPaper.java test (P4) JDK-8341037: Use standard layouts in DefaultFrameIconTest.java and MenuCrash.java (P4) JDK-8333403: Write a test to check various components events are triggered properly (P4) JDK-8342098: Write a test to compare the images client-libs/javax.accessibility: (P3) JDK-8339728: [Accessibility,Windows,JAWS] Bug in the getKeyChar method of the AccessBridge class (P4) JDK-8341453: java/awt/a11y/AccessibleJTableTest.java fails in some cases where the test tables are not visible client-libs/javax.imageio: (P3) JDK-8347911: Limit the length of inflated text chunks (P4) JDK-8342634: javax/imageio/plugins/wbmp/WBMPStreamTruncateTest.java creates temp file in src dir client-libs/javax.sound: (P4) JDK-8347576: Error output in libjsound has non matching format strings client-libs/javax.swing: (P2) JDK-8347427: JTabbedPane/8134116/Bug8134116.java has no license header (P2) JDK-8316627: JViewport Test headless failure (P3) JDK-8328553: Get rid of JApplet in test/jdk/sanity/client/lib/SwingSet2/src/DemoModule.java (P3) JDK-8342635: javax/swing/JFileChooser/FileSystemView/WindowsDefaultIconSizeTest.java creates tmp file in src dir (P4) JDK-8341316: [macos] javax/swing/ProgressMonitor/ProgressMonitorEscapeKeyPress.java fails sometimes in macos (P4) JDK-8226938: [TEST_BUG]GTK L&F: There is no Details button in FileChooser Dialog (P4) JDK-8226933: [TEST_BUG]GTK L&F: There is no swatches or RGB tab in JColorChooser (P4) JDK-8328558: Convert javax/swing/JCheckBox/8032667/bug8032667.java applet test to main (P4) JDK-8328717: Convert javax/swing/JColorChooser/8065098/bug8065098.java applet test to main (P4) JDK-8341978: Improve JButton/bug4490179.java (P4) JDK-8346324: javax/swing/JScrollBar/4865918/bug4865918.java fails in CI (P4) JDK-8346828: javax/swing/JScrollBar/4865918/bug4865918.java still fails in CI (P4) JDK-8346055: javax/swing/text/StyledEditorKit/4506788/bug4506788.java fails in ubuntu22.04 (P4) JDK-8315825: Open some swing tests (P4) JDK-8315882: Open some swing tests 2 (P4) JDK-8316146: Open some swing tests 4 (P4) JDK-8316218: Open some swing tests 5 (P4) JDK-8316371: Open some swing tests 6 (P4) JDK-8315952: Open source several Swing JToolbar JTooltip JTree tests (P4) JDK-8315883: Open source several Swing JToolbar tests (P4) JDK-8316149: Open source several Swing JTree JViewport KeyboardManager tests (P4) JDK-8316056: Open source several Swing JTree tests (P4) JDK-8327857: Remove applet usage from JColorChooser tests Test4222508 (P4) JDK-8327859: Remove applet usage from JColorChooser tests Test4319113 (P4) JDK-8328121: Remove applet usage from JColorChooser tests Test4759306 (P4) JDK-8328130: Remove applet usage from JColorChooser tests Test4759934 (P4) JDK-8328227: Remove applet usage from JColorChooser tests Test4887836 (P4) JDK-8328380: Remove applet usage from JColorChooser tests Test6348456 (P4) JDK-8328403: Remove applet usage from JColorChooser tests Test6977726 (P4) JDK-8328819: Remove applet usage from JFileChooser tests bug6698013 (P4) JDK-8342602: Remove JButton/PressedButtonRightClickTest test (P4) JDK-8341982: Simplify JButton/bug4323121.java (P4) JDK-8338668: Test javax/swing/JFileChooser/8080628/bug8080628.java doesn't test for GTK L&F (P5) JDK-8342508: Use latch in BasicMenuUI/bug4983388.java instead of delay core-libs: (P4) JDK-8347038: [JMH] jdk.incubator.vector.SpiltReplicate fails NoClassDefFoundError (P4) JDK-8345676: [ubsan] ProcessImpl_md.c:561:40: runtime error: applying zero offset to null pointer on macOS aarch64 (P4) JDK-8336012: Fix usages of jtreg-reserved properties (P4) JDK-8339834: Replace usages of -mx and -ms in some tests core-libs/java.io: (P3) JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java failing (P4) JDK-8345368: java/io/File/createTempFile/SpecialTempFile.java fails on Windows Server 2025 core-libs/java.lang: (P4) JDK-8346880: [aix] java/lang/ProcessHandle/InfoTest.java still fails: "reported cputime less than expected" (P4) JDK-8339687: Rearrange reachabilityFence()s in jdk.test.lib.util.ForceGC core-libs/java.lang.foreign: (P3) JDK-8331735: UpcallLinker::on_exit races with GC when copying frame anchor (P4) JDK-8286875: ProgrammableUpcallHandler::on_entry/on_exit access thread fields from native (P4) JDK-8343144: UpcallLinker::on_entry racingly clears pending exception with GC safepoints (P5) JDK-8327994: Update code gen in CallGeneratorHelper core-libs/java.lang:reflect: (P4) JDK-8345614: Improve AnnotationFormatError message for duplicate annotation interfaces core-libs/java.net: (P3) JDK-8304701: Request with timeout aborts later in-flight request on HTTP/1.1 cxn (P4) JDK-8317808: HTTP/2 stream cancelImpl may leave subscriber registered (P4) JDK-8345375: Improve debuggability of test/jdk/java/net/Socket/CloseAvailable.java (P4) JDK-8342811: java/net/httpclient/PlainProxyConnectionTest.java failed: Unexpected connection count: 5 core-libs/java.nio: (P2) JDK-8342145: File libCreationTimeHelper.c compile fails on Alpine (P3) JDK-8341881: [REDO] java/nio/file/attribute/BasicFileAttributeView/CreationTime.java#tmp fails on alinux3 (P3) JDK-8346671: java/nio/file/Files/probeContentType/Basic.java fails on Windows 2025 (P4) JDK-8211851: (ch) java/nio/channels/AsynchronousSocketChannel/StressLoopback.java times out (aix) (P4) JDK-8347171: (dc) java/nio/channels/DatagramChannel/InterruptibleOrNot.java fails with virtual thread factory (P4) JDK-8346972: Test java/nio/channels/FileChannel/LoopingTruncate.java fails sometimes with IOException: There is not enough space on the disk (P4) JDK-8338426: Test java/nio/channels/Selector/WakeupNow.java failed core-libs/java.time: (P3) JDK-8347965: (tz) Update Timezone Data to 2025a (P4) JDK-8352097: (tz) zone.tab update missed in 2025a backport (P4) JDK-8324672: Update jdk/java/time/tck/java/time/TCKInstant.java now() to be more robust core-libs/java.util.jar: (P5) JDK-8339154: Cleanups and JUnit conversion of test/jdk/java/util/zip/Available.java core-libs/java.util:i18n: (P4) JDK-8344589: Update IANA Language Subtag Registry to Version 2024-11-19 core-svc: (P4) JDK-8327505: Test com/sun/jmx/remote/NotificationMarshalVersions/TestSerializationMismatch.java fails core-svc/debugger: (P4) JDK-8325042: Remove unused JVMDITools test files (P4) JDK-8333391: Test com/sun/jdi/InterruptHangTest.java failed: Thread was never interrupted during sleep (P4) JDK-8315486: vmTestbase/nsk/jdwp/ThreadReference/ForceEarlyReturn/forceEarlyReturn002/forceEarlyReturn002.java timed out core-svc/java.lang.management: (P4) JDK-8347267: [macOS]: UnixOperatingSystem.c:67:40: runtime error: division by zero (P4) JDK-8345684: OperatingSystemMXBean.getSystemCpuLoad() throws NPE core-svc/javax.management: (P4) JDK-8343378: Exceptions in javax/management DeadLockTest.java do not cause test failure (P4) JDK-8343491: javax/management/remote/mandatory/connection/DeadLockTest.java failing with NoSuchObjectException: no such object in table (P4) JDK-8334777: Test javax/management/remote/mandatory/notif/NotifReconnectDeadlockTest.java failed with NullPointerException hotspot/compiler: (P2) JDK-8342498: Add test for Allocation elimination after use as alignment reference by SuperWord (P2) JDK-8337660: C2: basic blocks with only BoxLock nodes are wrongly treated as empty (P2) JDK-8340313: Crash due to invalid oop in nmethod after C1 patching (P2) JDK-8348562: ZGC: segmentation fault due to missing node type check in barrier elision analysis (P3) JDK-8345296: AArch64: VM crashes with SIGILL when prctl is disallowed (P3) JDK-8338100: C2: assert(!n_loop->is_member(get_loop(lca))) failed: control must not be back in the loop (P3) JDK-8340824: C2: Memory for TypeInterfaces not reclaimed by hashcons() (P3) JDK-8328085: C2: Use after free in PhaseChaitin::Register_Allocate() (P4) JDK-8341194: [REDO] Implement C2 VectorizedHashCode on AArch64 (P4) JDK-8331993: Add counting leading/trailing zero tests for Integer (P4) JDK-8326421: Add jtreg test for large arrayCopy disjoint case. (P4) JDK-8338595: Add more linesize for MIME decoder in macro bench test Base64Decode (P4) JDK-8333647: C2 SuperWord: some additional PopulateIndex tests (P4) JDK-8343205: CompileBroker::possibly_add_compiler_threads excessively polls available memory (P4) JDK-8339542: compiler/codecache/CheckSegmentedCodeCache.java fails (P4) JDK-8316885: jcmd: Compiler.CodeHeap_Analytics cmd does not inform about missing aggregate (P4) JDK-8327390: JitTester: Implement temporary folder functionality (P4) JDK-8325659: Normalize Random usage by incubator vector tests (P4) JDK-8341862: PPC64: C1 unwind_handler fails to unlock synchronized methods with LM_MONITOR (P4) JDK-8341715: PPC64: ObjectMonitor::_owner should be reset unconditionally in nmethod unlocking (P4) JDK-8336692: Redo fix for JDK-8284620 hotspot/gc: (P3) JDK-8345750: Shenandoah: Test TestJcmdHeapDump.java#aggressive intermittent assert(gc_cause() == GCCause::_no_gc) failed: Over-writing cause (P4) JDK-8346713: [testsuite] NeverActAsServerClassMachine breaks TestPLABAdaptToMinTLABSize.java TestPinnedHumongousFragmentation.java TestPinnedObjectContents.java (P4) JDK-8347256: Epsilon: Demote heap size and AlwaysPreTouch warnings to info level (P4) JDK-8337222: gc/TestDisableExplicitGC.java fails due to unexpected CodeCache GC (P4) JDK-8332494: java/util/zip/EntryCount64k.java failing with java.lang.RuntimeException: '\\A\\Z' missing from stderr hotspot/jfr: (P3) JDK-8337994: [REDO] Native memory leak when not recording any events (P4) JDK-8346108: [21u][BACKOUT] 8337994: [REDO] Native memory leak when not recording any events (P4) JDK-8320916: jdk/jfr/event/gc/stacktrace/TestParallelMarkSweepAllocationPendingStackTrace.java failed with "OutOfMemoryError: GC overhead limit exceeded" (P4) JDK-8340969: jdk/jfr/startupargs/TestStartDuration.java should be marked as flagless hotspot/jvmti: (P4) JDK-8317636: Improve heap walking API tests to verify correctness of field indexes hotspot/runtime: (P2) JDK-8325937: runtime/handshake/HandshakeDirectTest.java causes "monitor end should be strictly below the frame pointer" assertion failure on AArch64 (P3) JDK-8346847: [s390x] minimal build failure (P3) JDK-8345569: [ubsan] adjustments to filemap.cpp and virtualspace.cpp for macOS aarch64 (P3) JDK-8313905: Checked_cast assert in CDS compare_by_loader (P3) JDK-8347129: cpuset cgroups controller is required for no good reason (P3) JDK-8343599: Kmem limit and max values swapped when printing container information (P4) JDK-8334371: [AIX] Beginning with AIX 7.3 TL1 mmap() supports 64K memory pages (P4) JDK-8347268: [ubsan] logOutput.cpp:357:21: runtime error: applying non-zero offset 1 to null pointer (P4) JDK-8346881: [ubsan] logSelection.cpp:154:24 / logSelectionList.cpp:72:94 : runtime error: applying non-zero offset 1 to null pointer (P4) JDK-8319233: AArch64: Build failure with clang due to -Wformat-nonliteral warning (P4) JDK-8327986: ASAN reports use-after-free in DirectivesParserTest.empty_object_vm (P4) JDK-8343149: Cleanup os::print_tos_pc on AIX (P4) JDK-8343129: Disable unstable check of ThreadsListHandle.sanity_vm ThreadList values (P4) JDK-8295159: DSO created with -ffast-math breaks Java floating-point arithmetic (P4) JDK-8327098: GTest needs larger combination limit (P4) JDK-8338303: Linux ppc64le with toolchain clang - detection failure in early JVM startup (P4) JDK-8343343: Misc crash dump improvements on more platforms after JDK-8294160 (P4) JDK-8317919: pthread_attr_init handle return value and destroy pthread_attr_t object (P4) JDK-8324838: test_nmt_locationprinting.cpp broken in the gcc windows build (P4) JDK-8344646: The libjsig deprecation warning should go to stderr not stdout (P4) JDK-8330647: Two CDS tests fail with -UseCompressedOops and UseSerialGC/UseParallelGC (P4) JDK-8314752: Use google test string comparison macros (P4) JDK-8321818: vmTestbase/nsk/stress/strace/strace015.java failed with 'Cannot read the array length because "" is null' hotspot/svc: (P4) JDK-8326525: com/sun/tools/attach/BasicTests.java does not verify AgentLoadException case hotspot/svc-agent: (P4) JDK-8349039: Adjust exception No type named in database (P4) JDK-8341820: Check return value of hcreate_r (P4) JDK-8294316: SA core file support is broken on macosx-x64 starting with macOS 12.x hotspot/test: (P1) JDK-8341412: Various test failures after JDK-8334305 (P4) JDK-8334305: Remove all code for nsk.share.Log verbose mode (P4) JDK-8330702: Update failure handler to don't generate Error message if cores actions are empty (P4) JDK-8322983: Virtual Threads: exclude 2 tests (P5) JDK-8332917: failure_handler should execute gdb "info threads" command on linux infrastructure/build: (P3) JDK-8349729: [21u] AIX jtreg tests fail to compile with qvisibility=hidden (P3) JDK-8327460: Compile tests with the same visibility rules as product code (P4) JDK-8349603: [21u, 17u, 11u] Update GHA JDKs after Jan/25 updates (P4) JDK-8336498: [macos] [build]: install-file macro may run into permission denied error (P4) JDK-8342988: GHA: Build JTReg in single step (P4) JDK-8341424: GHA: Collect hs_errs from build time failures (P4) JDK-8342704: GHA: Report truncation is broken after JDK-8341424 (P4) JDK-8342858: Make target mac-jdk-bundle fails on chmod command (P4) JDK-8320691: Timeout handler on Windows takes 2 hours to complete infrastructure/release_eng: (P4) JDK-8353904: [21u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 21.0.7 (P4) JDK-8345370: Bump update version for OpenJDK: jdk-21.0.7 other-libs/other: (P4) JDK-8334490: Normalize string with locale invariant `toLowerCase()` security-libs/java.security: (P2) JDK-8320372: test/jdk/sun/security/x509/DNSName/LeadingPeriod.java validity check failed (P3) JDK-8311546: Certificate name constraints improperly validated with leading period (P3) JDK-8345414: Google CAInterop test failures (P3) JDK-8309841: Jarsigner should print a warning if an entry is removed (P3) JDK-8337951: Test sun/security/validator/samedn.sh CertificateNotYetValidException: NotBefore validation (P4) JDK-8347424: Fix and rewrite sun/security/x509/DNSName/LeadingPeriod.java test (P4) JDK-8302111: Serialization considerations (P4) JDK-8340116: test/jdk/sun/security/tools/jarsigner/PreserveRawManifestEntryAndDigest.java can fail due to regex security-libs/javax.crypto:pkcs11: (P3) JDK-8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms (P3) JDK-8293345: SunPKCS11 provider checks on PKCS11 Mechanism are problematic (P3) JDK-8342270: Test sun/security/pkcs11/Provider/RequiredMechCheck.java needs write access to src tree (P4) JDK-8331959: Update PKCS#11 Cryptographic Token Interface to v3.1 security-libs/javax.net.ssl: (P3) JDK-8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs (P4) JDK-8339261: Logs truncated in test javax/net/ssl/DTLS/DTLSRehandshakeTest.java (P4) JDK-8339356: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java failed with java.net.SocketException: An established connection was aborted by the software in your host machine tools/jar: (P4) JDK-8339810: Clean up the code in sun.tools.jar.Main to properly close resources and use ZipFile during extract tools/javac: (P4) JDK-8343882: BasicAnnoTests doesn't handle multiple annotations at the same position (P4) JDK-8336942: Improve test coverage for class loading elements with annotations of different retentions tools/javadoc(tool): (P4) JDK-8325529: Remove unused imports from `ModuleGenerator` test file tools/jpackage: (P2) JDK-8331977: Crash: SIGSEGV in dlerror() (P3) JDK-8343100: Consolidate EmptyFolderTest and EmptyFolderPackageTest jpackage tests into single java file (P3) JDK-8343178: Test BasicTest.java javac compile fails cannot find symbol (P4) JDK-8342609: jpackage test helper function incorrectly removes a directory instead of its contents only (P4) JDK-8317283: jpackage tests run osx-specific checks on windows and linux (P4) JDK-8343314: Move common properties from jpackage jtreg test declarations to TEST.properties file (P4) JDK-8344326: Move jpackage tests from "jdk.jpackage.tests" package to the default package (P4) JDK-8343102: Remove `--compress` from jlink command lines from jpackage tests (P4) JDK-8343101: Rework BasicTest.testTemp test cases (P4) JDK-8320706: RuntimePackageTest.testUsrInstallDir test fails on Linux (P4) JDK-8333116: test/jdk/tools/jpackage/share/ServiceTest.java test fails (P4) JDK-8314909: tools/jpackage/windows/Win8282351Test.java fails with java.lang.AssertionError: Expected [0]. Actual [1618]: (P4) JDK-8344275: tools/jpackage/windows/Win8301247Test.java fails on localized Windows platform (P4) JDK-8343396: Use OperatingSystem, Architecture, and OSVersion in jpackage tests (P4) JDK-8227529: With malformed --app-image the error messages are awful tools/jshell: (P4) JDK-8327476: Upgrade JLine to 3.26.1 tools/launcher: (P3) JDK-8341135: Incorrect format string after JDK-8339475 (P4) JDK-8339475: Clean up return code handling for pthread calls in library coding